Scottish Ambulance Service Loses 895,000 Patient Records

The ENCRYPTED disk contained 894,629 call records between February 2006 and June 2008, including the addresses of incidents, phone numbers and patient names.

Unlike so many other incidents, at least this company:

• Encrypted their data before transporting it.
• Immediately notified authorities.
• Immediately admitted to the public what happened and disclosed details.
• Doesn’t try to hide the incident from the public.

Related Links:

• Scottish Ambulance Service loses nearly 900,000 records
• Missing Disk Questions & Answers
• More articles about careless organizations that allow data to be stolen…

June Bad Month For 411,000 U.K. Customers of Virgin Media, HSBC and Cotton Traders

Virgin Media lost an unencrypted computer disk containing data on 3,000 customers that signed up for services via Carphone Warehouse stores in the United Kingdom. Records contain bank details, names and addresses. No mention at all on VirginMedia.com or CarPhoneWarehouse.com.

HSBC lost a computer disk containing data on 370,000 customers. Records contain details such as name, date of birth, level of insurance coverage, and whether or not a customer is a smoker. I found no mention on HSBC.co.uk or HSBC.com.

The BBC reports that records for 38,000 credit card customers have been stolen from U.K. clothing firm Cotton Traders. The company disputes the number of affected customers. There is no mention of the incident on CottonTraders.co.uk.

Related Links:

• Virgin Media loses 3,000 customer records
• HSBC loses 370,000 customer details
• Retailer loses thousands of card details in online hack
• More articles about careless organizations that allow data to be stolen…

51,000 Wards Credit Card Records Exposed

This data loss was the result of specific attacks against their online network. The criminals proceeded to sell the credit card numbers online. Information included the card numbers, their three-digit “security codes”, expiration dates, as well as the cardholders’ names, addresses and phone numbers.

At least 51,000 records were exposed in the breach at the parent company of Montgomery Ward. The venerable Wards chain that began in 1872 went out of business in 2001, but in 2004 a catalog company, Direct Marketing Services Inc., bought the brand name out of bankruptcy. It now runs a Wards.com Web site along with six other sites, including three with Sears brands it has acquired: SearsHomeCenter.com, SearsShowplace.com and SearsRoomforKids.com.

Definitely read the whole article. The company tries to shift blame because the guidelines from Visa on how to respond to a security breach didn’t mention that the company should also inform the affected consumers.

It just illustrates the point that these type of events probably happen more frequently than most of us suspect and are often covered up to prevent a public relations crisis.

Related Links:

• Wards didn’t tell consumers about credit card hack
• More articles about careless organizations that allow data to be stolen…

Reader Suggestion: Nexzon

Naiyer from Carpet City, India suggested we check out the mobile site etick. Read more

Reader Suggestion: Van Der Ham Trading

Ivan from the Netherlands suggested we check out the mobile site etick. Read more

Reader Suggestion: WorkComp

Michael from Boca Raton, Florida suggested we check out the mobile site etick. Read more

Reader Suggestion: Find a Toilet

Sue from Telford in the United Kingdom suggested we check out the mobile site Find a Toilet. Read more

Next Page »