This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 787

SUMMARY

Personal information of 6.3 million exposed by database hack
Records	6,300,000
Record Types	SSN NAA EMA ACC
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	TD Ameritrade
Other Affected/Involved Organizations	None
Lawsuit?	YES
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Anonymous

STOCK PRICE

Chart?chxt=x,y&chxl=0:|aug-31|sep-21|oct-11|&chxr=1,17

SIMILAR INCIDENTS

records	date	organizations
5,000,000	2003-03-06	Data Processors International
4,000,000	2006-06-13	KDDI
4,200,000	2008-03-17	Hannaford
5,000,000	2008-12-08	CheckFree Corporation (FiServ)

TIMELINE

Date	Event
2005-10-31	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: (type the code from the image)
2007-09-14	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: (type the code from the image)
2007-05-31	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: (type the code from the image)

MAP OF INCIDENT LOCATION

Address: USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

189.ORDER-RejectingFinalSettlementApprovalAndOrderingCMC.pdf ORDER Rejecting Final Settlement Approval and Ordering Settlement Conference Docket Document 189 Filed 10/23/09

KNOWN COURT CASES

IN PROGRESS

Elvey v. TD Ameritrade, Inc.

Filed On

Justia Link

Pacer Link

Court

Federal?

Case Number

Pacer Case Number

Incident

2007-05-31

Pacer Docket

Justia

US DISTRICT COURT NORTHERN DISTRICT OF CALIFORNIA

true

3:2007cv02852

192623

787

Case Files

Awards / Settlements

Award	Monetary Value	Description
	$0.00

OSF Summary

MERGED

Zigler v. TD Ameritrade

Filed On

Justia Link

Pacer Link

Court

Federal?

Case Number

Pacer Case Number

Incident

2007-09-21

Pacer Docket

Justia

US DISTRICT COURT NORTHERN DISTRICT OF CALIFORNIA

true

2007cv04903

196127

787

Case Files

Zigler v. TD AmeriTrade - September 21, 2007 - Complaint

Awards / Settlements

Award	Monetary Value	Description
	$0.00

OSF Summary

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate ¹

$378,000,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 187

add details to this primary source Description
Personal information of 6.3 million exposed by TD Ameritrade database hack
Filename	Source	Researcher	Incident IDs
NH_Ameritrade.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	787
Records	File Date	Uploaded	Updated
32204	2007-09-13	2008-12-04	23 Sep 13:04
Excerpt
E AMEm1·nA¤E ` ~ `·r`r ``V. = »f==~‘a.· ~&:3l = tw =&¢-Q, ’·.~,gm, i,= , . A ‘ ZLFQ} » ‘ J A I I. » it Y ~» V‘ ¢;¥‘» ‘ I q J : 7 G i I 6940 Columbia Gateway Driv...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1101

add details to this primary source Description
Maine Attorney General breach notification sent to TD Ameritrade customers September 13, 2007. Includes notification sent to former TD Waterhouse customers, and former Ameritrade customers. The difference is very illuminating. -Matthew Elvey (who uncovered the breach).
Filename	Source	Researcher	Incident IDs
ME_09142007_ameritrade.pdf	Maine Attorney General	kirniki	787
Records	File Date	Uploaded	Updated
20131	2007-09-13	2009-01-19	30 Jan 21:47
Excerpt
It _— ANIERITRADE S .ie EDO Coiumbia. lvlD 2lO46 ~ David R. Hale, CIPP Chief Privacy Counsel David.HaIe@tdameritrade.com 4 443-766-7009 September 13, 2007 BY REGULAR MAIL · 4 · Office of the Attorney...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1476

add details to this primary source Description
Unauthorised code run on Ameritrade systems provides hacker access to user information
Filename	Source	Researcher	Incident IDs
2007-09-13_TD_Ameritrade.pdf	Hawaii Office of Consumer Protection	d2d	787
Records	File Date	Uploaded	Updated
33157	2007-09-13	2009-03-18	02 Apr 17:25
Excerpt
‘- · AMERITRADE A` - .. = . ¤Ji~?.»¢·i ``:= fiéi. iz? A l . .. . ~, . ·.- -.-. -- . ... . ,._, _ . . ·- . .. A- -- »=—- .:=. .i‘-.2 J i....

Click here for the Full Details | Download Raw PDF

COMMENTS

by elvey [Apprentice Investigator] on 2010-06-05 (2 months ago)

Attorney Gretchen Nelson of Kreindler and Kreinder has assumed representation of the class.
A Settlement Conference took place March 3, 2010. A second Settlement Conference was scheduled for May 18, then rescheduled to June 8, then rescheduled again to July 12th.

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
Email | Fraud Se | Hack | Lost Computer
Lost Document | Lost Drive | Lost Laptop | Lost Media
Lost Tape | Missing Laptop | Snail Mail | Stolen Computer
Stolen Document | Stolen Drive | Stolen Laptop | Stolen Media
Stolen Tape | Unknown | Virus | Web