This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1775 To_xml

SUMMARY

Employee performing unauthorized database searches, customers SSN exposed
Records 2,108
Record Types SSN NAA
Breach Type Unknown
Data Family Unknown
Source Inside - Malicious
Organization City of New York Department of Environmental Protection
Other Affected/Involved Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: kirniki

TIMELINE

DateEvent
2006-12-04 Incident Occurred
None. Add Data Incident Discovered By Organization
2007-03-28 Organization Reports Incident
2007-03-26 Organization Mails Notifications
None. Add Data Records Recovered
None. Add Data Lawsuit Filed
None. Add Data Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations
1,298 2010-07-16 Utah Department of Workforce Services

MAP OF INCIDENT LOCATION

Address: Flushing, NY, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate 1 $126,480.00
  1. Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 772

add details to this primary source Description
New York breach notification - City of New York Department of Environmental Protection - An employee was performing unauthorized data searches on customers details. SSN of 2108 affected
FilenameSourceResearcher Incident IDs
NY_dept_environmental_protection.pdfNew York State Consumer Protection Boardcwalsh <a href='/incidents/show/1775'>1775</a>
RecordsFile DateUploadedUpdated
0 2007-03-28 2008-12-25 17 Feb 19:24
Excerpt
772

@3/28/2@@7 16: 28 17185954BQl DEP COLL PAGE @1 txgncxnwegggev ro, iam From city L S l , V j Phone: 7i8~595—559Q Dépaftlhéht of ’ N Far; "B·5%**°2i Envnronmental Protectrcn To: Constr ner Protection...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 257

add details to this primary source Description
Auditing of database records identifies unauthorised access to database records
FilenameSourceResearcher Incident IDs
NH_nyc.pdfNew Hampshire Consumer Protection & Antitrust Bureaukirniki <a href='/incidents/show/1775'>1775</a>
RecordsFile DateUploadedUpdated
6 2007-04-11 2008-12-04 23 Sep 14:21
Excerpt
257

QE;E;Z;:IEj:_E:*§ZiIiET5}?iIEIi·§I¤.QI5E§E`E`E§IQE¤:§E;`:E§E§E5 ·j¤g;j,.g;s j; j;g;_;-g ji. —j;2QjQ2}2}ij2{2Q2Q:`:_:Q2Q2-2-2}2-2;2Q:Q:Q:§j§:§:§:§j§:§:§:§:}:-;»§?_. <·:;1;:_?q;:g§tgj;:·,F?§j:—.;._....

Click here for the Full Details | Download Raw PDF

COMMENTS

New Comment

captcha
Are you human?

Sponsored By: Credant_200x51 Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.