This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1042

SUMMARY

Social Security numbers of 4,700 employees posted on website
Records	4,700
Record Types	SSN
Breach Type	Web
Data Family	Electronic
Source	Outside
Organization	Washington Metropolitan Area Transit Authority
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	kirniki

Date	Event
2008-06-09	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2008-06-25	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2008-07-14	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
4,118	2006-01-28	State of Rhode Island, New England Interactive
10,554	2007-07-26	Penn State University, United States Marine Corps
3,300	2008-10-16	City of Indianapolis

Address: 600 5th St NW, Washington, DC 20001, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$282,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Maryland breach notification - Washington Metropolitan Area Transit Authority (WMATA) inadvertently posted names and SSN of 879 Maryland residents on website.
Filename	Source	Researcher	Incident IDs
MD_ITU-154871.pdf	Maryland Attorney General	kirniki	<a href='/incidents/show/1042'>1042</a>
Records	File Date	Uploaded	Updated
879	2008-07-08	2008-12-04	23 Sep 12:53
Excerpt
l i Q1 .;»· ,.`,q ` `’`` ii `‘ i l.· {»~»— ! '»4' ” i l July 8, 2008 Office of the Attorney General j Attn: Security Breach Notification l 200 St. Paul Place l I Baltimore,...

add details to this primary source Description
Personal information of current and former employees posted on internet by mistake
Filename	Source	Researcher	Incident IDs
VA_07082008_washington_metro_area_transit_authority.pdf	Virginia Attorney General	jkouns	<a href='/incidents/show/1042'>1042</a>
Records	File Date	Uploaded	Updated
105	2008-07-08	2009-02-03	16 Feb 10:42
Excerpt
scat i ·-u Fi iff il Z. . Eb lj, __;A;F.i;i;.....‘»".. i‘i...é. July s, 200e Q;. til tllll. lil §.;; l i Office of the Attorney General i i 900 East Main Street ttt, "‘-`’ Richmond...