This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1323 To_xml

SUMMARY

Missing portable storage device containing names and social security numbers of "certain" US Employees
Records 33,923
Record Types SSN NAA
Breach Type Lost Drive
Data Family Electronic
Source Inside - Accidental
Organization The Pepsi Bottling Group
Other Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: d2d

STOCK PRICE

Chart?chxt=x,y&chxl=0:|dec-9|dec-30|jan-21|&chxr=1,17

SIMILAR INCIDENTS

recordsdateorganizations

SPONSOR

Zecurion Sponsors DataLossDB

Zecurion protects organizations worldwide, with more than 5,000 global deployments, using its award-winning software security solutions. Zecurion’s solutions create a “locked-vault” around data on servers, backup storage media, e-mail, peripheral devices and printers that both monitors and prevents unauthorized access.

TIMELINE

DateEvent
2008-12-08 Incident Occurred
None. Add Data Incident Discovered By Organization
2008-12-23 Organization Reports Incident
None. Add Data Organization Mails Notifications
None. Add Data Records Recovered
None. Add Data Lawsuit Filed
None. Add Data Arrest Made

MAP OF INCIDENT LOCATION

Address: United States
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate 1 $2,035,380.00
  1. Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 883

add details to this primary source Description
Pepsi notification of stolen storage media containing personal information of certain employees, including 198 New Hampshire residents.
FilenameSourceResearcher Incident IDs
pepsi.pdfNew Hampshire Consumer Protection & Antitrust Bureaud2d 1323
RecordsFile DateUploadedUpdated
198 2008-12-23 2009-01-01 05 Jan 23:14
Excerpt
883

spas * THE Pepsi Bcrruus GROUP December 23, 2008 Kelly Ayotte, Attorney General 33 Capital Street Concord, New Hampshire 03301 Re: Recent Unauthorized Disclosure of Personal Infomation Dear Attorney...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1230

add details to this primary source Description
Pepsi breach notification letter to Maryland
FilenameSourceResearcher Incident IDs
ITU-164560.pdfMaryland Attorney Generalkirniki 1323
RecordsFile DateUploadedUpdated
1398 2008-12-23 2009-01-31 01 Feb 22:56
Excerpt
1230

spas THE Pepsi B0·rruNG Gn0ur= December 23, 2008 Douglas F. Gensler, Attorney General Attn: Security Breach Notification 200 St. Paul Place · Baltimore, Maryland 21202 Re: Recent Unauthorized Disclos...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1260

add details to this primary source Description
Data disk containing personal information about employees lost
FilenameSourceResearcher Incident IDs
VA_12232008_pepsi_bottling_group.pdfVirginia Attorney Generaljkouns 1323
RecordsFile DateUploadedUpdated
1526 2008-12-23 2009-02-03 04 Feb 11:27
Excerpt
1260

. % W @ G THE Pepsi Bcrrcrws Gnoup December 23, 2008 A _ Robert McDonnell, Attorney General . ii 900 East Main Street J _ Richmond, VA 23219 ` 5 ~ r Re: Recent Unauthorized Disclosure of...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1909

add details to this primary source Description
North Carolina breach notification - Pepsi Bottling Group - a USB device containing unencrypted personal information, including names and Social Security numbers was missing. 1077 North Carolina residents affected.
FilenameSourceResearcher Incident IDs
20081223_pepsi_bottling_group.pdfNorth Carolina Department of Justice, Consumer Protection Divisiond2d 1323
RecordsFile DateUploadedUpdated
1077 2008-12-23 2009-06-13 14 Jun 18:39
Excerpt
1909

$ PBG THE Pepsi Bcrrtms Gnoup December 23, 2008 _ _ Roy Cooper, North Carolina Attorney General North Carolina Department of Justice Attn: Consumer Protection Division 9001 Mail Service Center Ralei...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1667

add details to this primary source Description
New York Data Breach Notification : Missing portable storage drive with unencrypted data was lost. Personal information may contain name, address and SSN.
FilenameSourceResearcher Incident IDs
The-Pepsi-Bottle-OTHER.pdfNew York State Consumer Protection Boardcwalsh 1323
RecordsFile DateUploadedUpdated
2037 2008-12-23 2009-05-08 03 Jul 18:00
Excerpt
1667

we Pe aerrrme anew December 23, 2008 New York State Office of the Attorney General SECURITY BREACH NOTIFICATION Consumer Frauds & Protection Bureau 120 Broadway — 3'd Floor New York, New York 10271...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 2099

add details to this primary source Description
Massachusetts Data Breach Notification : Pepsi Bottling Group - Portable data storage device from the payroll department was lost which contained unencrypted personal information.
FilenameSourceResearcher Incident IDs
20081223_pepsi_bottling_group_MA.pdfMassachusetts Attorney Generald2d 1323
RecordsFile DateUploadedUpdated
478 2008-12-23 2009-08-08 09 Aug 19:43
Excerpt
2099

spas _ Tue Pepsi Borrunrs Gnouv December 23, 2008 Attomey General Martha Coakley Office of the Attorney General One Ashburton Place Boston, MA 02108 Dear Attomey General Coakley: Pursuant to M.G.L....

Click here for the Full Details | Download Raw PDF

COMMENTS

New Comment

simple_captcha.jpg
(type the code from the image)

Sponsored By: Credant_200x51 Tenable Pgp_logo Zecurion
Permission is granted to use this database in non-profit works and research. Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation for commercial interests requires authorization and licensing arrangements. For more information, please e-mail curators@datalossdb.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2010, Open Security Foundation, All Rights Reserved.