Primary Sources

Primary Source ID: 1488

add details to this primary source Description
On 11-12-2008 Express Scripts, a co. headquartered in St. Louis, MO, notified the Michigan Attorney General of a potential breach on Michigan residents. This potential breach source was an extortion letter sent to both the company and its clients/members, which threatened to expose PII allegedly stolen from the system. The PII at risk of exposure includes 75 member of the organization and includes social security numbers, names, dates of birth, and historical pharmaceutical prescriptions. The company reported this information to law enforcement and instituted a number of measures to mitigate the risk of identity theft including (a) issuance of press releases dated 11-6-2008 and 11-11-2008. (b) launch of a breach notification website to both notify and assist its clients/members, and (c) the availability of an identity restoration service to assist its clients/members.
Filename	Source	Researcher	Incident IDs
20081114_MI_express_scripts.pdf	Michigan Attorney General	Alina_Johnson	1198
Records	File Date	Uploaded	Updated
Not yet entered	2008-11-12	2009-03-22	06 Apr 22:46
Excerpt
i _ l AQ]; , I · EXPRESS SCRiPTS® c "'? " A `” E . 6 . .$HE..--. »-· - ; November 12, .2008 ATTORNEY GENERAL ‘ r NOK! 1,4, 2088 1 ` The Honorable Mike Cox or Office of the Attorney General _...

Download Raw PDF

Back

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
Email | Fraud Se | Hack | Lost Computer
Lost Document | Lost Drive | Lost Laptop | Lost Media
Lost Tape | Missing Laptop | Snail Mail | Stolen Computer
Stolen Document | Stolen Drive | Stolen Laptop | Stolen Media
Stolen Tape | Unknown | Virus | Web

Sponsored By:

Permission is granted to use this database in non-profit works and research. Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation for commercial interests requires authorization and licensing arrangements. For more information, please e-mail curators@datalossdb.org with a brief summary of how you would like to use this information; product, service, research, etc.