This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 932

SUMMARY

4.2 million credit card and debit card numbers exposed in breach
Records	4,200,000
Record Types	CCN
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	Hannaford
Other Affected/Involved Organizations	None
Lawsuit?	YES
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Anonymous

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: (type the code from the image)
2008-03-17	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: (type the code from the image)

records	date	organizations
5,000,000	2003-03-06	Data Processors International
4,000,000	2006-06-13	KDDI
5,000,000	2008-12-08	CheckFree Corporation (FiServ)

Address: USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$252,000,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Vermont breach notification - Hannaford Bros. Co - data was intercepted during credit and debit card authorization transactions. Stores impacted were located in New England, New York and as well as sweetbay stores in Florida.
Filename	Source	Researcher	Incident IDs
VT_1209485508_Hannaford_Security_Breach_Notice.pdf	Vermont Office of the Attorney General	kirniki	932
Records	File Date	Uploaded	Updated
Not yet entered	2008-03-17	2008-12-05	23 Sep 18:50
Excerpt
· . ..i=i&;¤e...i2:é2é21 ·’’‘ ... ~ ..;= · T .2 ‘‘‘ ;‘`‘ ‘ . For lmmediate Release Contact: Media Relations March 17, 2008 (207) 885-3132 News Release HANNAEORD ANNOUNCES CONTAIN...

add details to this primary source Description
Maine Data Breach Notification : Data breach at Hannafords presents credit card and debit card compromise for 5354 customers of Gorham Savins Bank.
Filename	Source	Researcher	Incident IDs
ME_BFI_04072008_gorham_savings_bank.pdf	Maine Attorney General	kirniki	932
Records	File Date	Uploaded	Updated
5354	2008-03-28	2009-01-29	15 Jun 08:23
Excerpt
Gmrham I. SAVINGS BANK ( . - . I aI _ . __ _ . , _ r I - _.APR·7I2DU8 _ - - I BUFlEAUIoF . _ _ _ ( March 28, 2008 . - l=¤r¤ANcrALrNsrrr1rr¤o:us . Ms. Meri-Lynn Banton I _ . -I . I I _ FDIC- Concord F...

add details to this primary source Description
HSBC breach notification possibly relating to the Hannaford Brothers data breach somehow about potentially compromised accounts.
Filename	Source	Researcher	Incident IDs
NH_hsbc.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	1382 \| 932
Records	File Date	Uploaded	Updated
19	2008-04-25	2008-12-04	25 Jan 20:37
Excerpt
`````` — § —.;` \ \\`» r —·—~ \ April 25, 2008 Ms. Lauren J. Noether Bureau Chief Consumer Protection & Anti-Trust 33 Capitol Street Concord, NH 03301 RE: Notice of Possible Unauthorized Disclo...

add details to this primary source Description
New York Data Breach Notification : Unauthorised access of "Forgot Login" page was used to gain access to users account information online.
Filename	Source	Researcher	Incident IDs
HSBC-Card--Retail-FS_1.pdf	New York State Consumer Protection Board	cwalsh	1382 \| 932
Records	File Date	Uploaded	Updated
106	2008-04-28	2009-06-15	18 Apr 10:01
Excerpt
. ` g`* j. RETAEL SERVECES ‘ ~ ’ $(30 Wmuq {Baie Rd Wood {Baie: BL SCUQ1 FAX (E30,} 52?—645`? ;i’‘ VVWVq ‘’;`;¥= €;;;;_ V·‘`Z· · `· ’¥;;; ,;.; ` Tot F C Fmmr @’?’**··· U7¢?¢#··~i...