This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1328

SUMMARY

Scholarship application database leaked on web, exposing names, addresses and Social Security numbers
Records	160
Record Types	SSN NAA
Breach Type	Web
Data Family	Electronic
Source	Inside - Accidental
Organization	National Association of Chain Drug Stores Fondation (NACDS)
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	d2d

Date	Event
2008-10-07	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2008-10-08	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2008-11-03	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

Address: Alexandria, VA, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$9,600.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Notification letter to New Hampshire regarding NACDS emailing of a link to an internet accessible database containing sensitive scholarship applicant data.
Filename	Source	Researcher	Incident IDs
nacds.pdf	New Hampshire Consumer Protection & Antitrust Bureau	d2d	<a href='/incidents/show/1328'>1328</a>
Records	File Date	Uploaded	Updated
3	2008-11-03	2009-01-01	02 Jan 19:37
Excerpt
i V ;; $?€Y[ ,,,,,,,,,,._,,, iffij N/C:'Z"JNAL .»\$5`}C,1.=\"`EC N rw J" , - ·— tittiin tmie tstostis ’°‘~~_A§"?’“€ _ Utttce et the Atterttey {genera} Depamnent of Justice Con snrnet Protection Bur...

add details to this primary source Description
NACDS Foundation exposes names, addresses and Social Security numbers through a hyperlink sent in an email to 160 scholarship applicants.
Filename	Source	Researcher	Incident IDs
MD_ITU-161383.pdf	Maryland Attorney General	kirniki	<a href='/incidents/show/1328'>1328</a>
Records	File Date	Uploaded	Updated
6	2008-11-03	2008-12-09	23 Sep 18:56
Excerpt
1 1 NACDS November 3, 2008 1 F O U N D AT 1 O N 1 Via UPS Ground and Facsimile A 1 Douglas F. Gansler Office of the Attomey General f Attn: Security Breach Notification . i 200 St. Paul place Baltimo...

add details to this primary source Description
Unauthorised people were sent link on email to access personal information of name, address and Social Security Number on web by mistake
Filename	Source	Researcher	Incident IDs
20081103-NACDS.pdf	Maine Attorney General	d2d	<a href='/incidents/show/1328'>1328</a>
Records	File Date	Uploaded	Updated
0	2008-11-03	2009-01-12	16 Jan 19:46
Excerpt
VVVVVVVWWVWW November 3, 2008 FUUN DATION e’iiii`iZ¥‘i$`ii§°§‘§¥3Fi§§ V .i¤ UPS Gr<>¤¤d Steven Rowe Office of the Attorney General Consumer Protection Division 6 State House Station Augusta, ME 04333...

add details to this primary source Description
Massachusetts Data Breach Notification : NACDS Foundation - Link sent in email contained link to website that allowed for personal information to be exposed.
Filename	Source	Researcher	Incident IDs
20081103_nacds_foundation_MA.pdf	Massachusetts Attorney General	d2d	<a href='/incidents/show/1328'>1328</a>
Records	File Date	Uploaded	Updated
24	2008-11-03	2009-08-08	10 Aug 20:38
Excerpt
or November 2, 2008 0, . n - 1 0 L1 10 A10 1 0 N "’ Ti NATIONAL ASSOCIATION OF ' __ . CHAIN DRUG Sronas g.,;;·,11®&‘£~ Oiiice of the Attomey General tymh Consumer Protection Division...

add details to this primary source Description
Massachusetts state notification letter: Scholarship application database leaked on web, exposing names, addresses and Social Security numbers
Filename	Source	Researcher	Incident IDs
20081103_nacds_foundation.pdf	Massachusetts Attorney General	d2d	<a href='/incidents/show/1328'>1328</a>
Records	File Date	Uploaded	Updated
24	2008-11-03	2009-08-08	13 Sep 12:55
Excerpt
\ November 3, 2008 ,_, ,. U ?_ _ r-ou N on r o N ··.?§ NATIONAL ASSOCIATION OF · · CHMN DRUG sronrs . ., A , Ofhce of the Attomey General Consumer Protection Division ~ ...,.,_,,._,,,,n,,r,...