This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1999

SUMMARY

Incorrect personal information of dependants sent to customers, exposing others dependnats details.
Records	1,006
Record Types	SSN NAA DOB
Breach Type	Snail Mail
Data Family	Unknown
Source	Inside - Accidental
Organization	Mercer Outsourcing
Other Affected/Involved Organizations	Wendy's International, Inc
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	altonius

Date	Event
2007-11-29	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
None. Add Data	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2008-01-29	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2008-01-29	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
1,195	2006-09-06	Unknown Organization, Transportation Security Administration (TSA)
1,000	2007-02-08	Piper Jaffray, Unknown Organization
600	2007-11-22	Bank of Ireland Group

Address: United States
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$60,360.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
New Hampshire Data Breach Notification : Incorrect dependent information was sent with benefits plan information.
Filename	Source	Researcher	Incident IDs
NH_wendys1.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
4	2008-01-29	2008-12-04	23 Sep 14:36
Excerpt
V ......... i i .... - .... g January 29, 2008 A VLA FACSIMILE & ORDINARY MAIL ‘ Attorney General Department of Justice 33 Capitol Street ; Concord, NH 03301 Facsimile: 603-271-2110 Re: Wendy’s I...

add details to this primary source Description
Sample notification letter : Statements posted to employees contained incorrect inforamtion pertaining to other employees and/or their dependants, including names, SSN and DOB.
Filename	Source	Researcher	Incident IDs
NH_wendys2.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
Not yet entered	2008-01-29	2008-12-04	23 Sep 13:05
Excerpt
January 29, 2008 Q is . a Dear Fellow Employee and Dependent (18 yrs. or older): § x I Bm Ctmtas.- ` Ott and ’Ou! d · · · d dg {_ 2*8 Y y } epeudent because of a data security incident involving your...

add details to this primary source Description
Hawaii Data Breach Notification : Benefits plan incorrectly printed dependant details of other customers on reports, may have included, name, address, SSN and DOB.
Filename	Source	Researcher	Incident IDs
2008-01-29_Mercer_Outsourcing_Wendys.pdf	Hawaii Office of Consumer Protection	d2d	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
7	2008-01-29	2009-03-18	14 Jul 22:55
Excerpt
_ ` irnlzg-znuh urnrrir FROM-•VENDY'S lNT*" EIOHAL nc + 3 r-san r. cuixnur r-rn ¤=¤ ·¤•¤¤¤¤¤ \|.-- lv`- i ·` L LJ F ' " ·~·· ··· acsrmrle Cover Sheet To: Office of Consumer Protection Company:...

add details to this primary source Description
Sample Letter outlining data breach : Mercer outsourcing experienced an admin error that exposed personal information, including name, SSN and DOB of dependents.
Filename	Source	Researcher	Incident IDs
NH_wendys3.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
0	2008-01-29	2008-12-04	23 Sep 15:37
Excerpt
January 29, 2008 X Dear Fellow Employee and Parent or Guardian of a Minor Dependent: Oztgqcfntmunm ggogimbecal? page of a data securxty xncrdent mvolvrng your minor dependenfs data I were r ,e I , r...

add details to this primary source Description
North Carolina Data Breach Notification : Wendy's - Mercer outsourcing printed incorrect information on pre-filled-in forms and sent to incorrect employees.
Filename	Source	Researcher	Incident IDs
20080129_wendys.pdf	North Carolina Department of Justice, Consumer Protection Division	d2d	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
27	2008-01-29	2009-06-13	23 Aug 19:19
Excerpt
~ ,,. MJ ’~— [_; I"! N/' 4 +i` · ` J ’ " .-. , JjN—2Q-ZUGB UMBPM FROM-WENDYU QNTERNATQUNAL INC ·’ {/’ L * · ·-··" T-635 P 101/DUB ¢—4a5 W North Carolina Security Breach Reporting Form Pursuan...

add details to this primary source Description
Massachusetts Data Breach Update Notice : Letter to MA's AAG replying to earlier correspondence.
Filename	Source	Researcher	Incident IDs
wendys_split_3.pdf	Massachusetts Attorney General	d2d	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
0	2008-02-05	2010-01-23	31 Mar 22:27
Excerpt
Writer's Direct Dial: 614-764-3242 Writer's Direct Fax: 614-764-3243 February 5, 2008 Scott D. Schafer Assistant Attorney General Office of the Attorney General Consumer Protection Division One Ash...

add details to this primary source Description
Massachusetts Data Breach Notification : Administrative error at Mercer Outsourcing exposed personal information of some empoyees dependants.
Filename	Source	Researcher	Incident IDs
wendys_split_2.pdf	Massachusetts Attorney General	d2d	<a href='/incidents/show/1999'>1999</a>
Records	File Date	Uploaded	Updated
28	2008-01-29	2010-01-23	31 Mar 22:32
Excerpt
January 29, 2008 VIA FACSIMILE & ORDINARY MAIL Office of the Attorney General Consumer Protection Division 100 Cambridge Street Boston, MA 02114 Facsimile: 617-727-5765 Re: WendY's International....