<?xml version="1.0" encoding="UTF-8"?>
<incident>
  <arrest type="boolean">false</arrest>
  <breach-type-id type="integer" nil="true"></breach-type-id>
  <comments-count type="integer">1</comments-count>
  <data-family-id type="integer">1</data-family-id>
  <data-recovered type="boolean">false</data-recovered>
  <disputed type="boolean">false</disputed>
  <fringe type="boolean">false</fringe>
  <fringe-description nil="true"></fringe-description>
  <id type="integer">2382</id>
  <lawsuit type="boolean">false</lawsuit>
  <records type="integer">0</records>
  <submission-id type="integer">1511</submission-id>
  <updated-at type="datetime">2011-07-05T21:17:39Z</updated-at>
  <user-id type="integer">1223</user-id>
  <breach-types type="array">
    <breach_type>
      <name>Disposal  Drive</name>
    </breach_type>
  </breach-types>
  <data-types type="array">
    <data_type>
      <short_name>SSN</short_name>
    </data_type>
    <data_type>
      <short_name>NAA</short_name>
    </data_type>
    <data_type>
      <short_name>MISC</short_name>
    </data_type>
    <data_type>
      <short_name>DOB</short_name>
    </data_type>
  </data-types>
  <timeline-items type="array">
    <timeline_item>
      <first_date>2009-10-05 00:00:00 UTC</first_date>
      <type>Incident Occurred</type>
    </timeline_item>
    <timeline_item>
      <first_date>2009-10-05 00:00:00 UTC</first_date>
      <type>Organization reports incident</type>
    </timeline_item>
  </timeline-items>
  <vector>
    <name>Inside - Accidental</name>
  </vector>
  <primary-organization>
    <business-type-id type="integer">3</business-type-id>
    <freebase-cached-data type="yaml" nil="true"></freebase-cached-data>
    <freebase-description>The National Archives and Records Administration (NARA) is an independent agency of the United States government charged with preserving and documenting government and historical records and with increasing public access to those documents, which comprise the National Archives. NARA is officially responsible for maintaining and publishing the legally authentic and authoritative copies of acts of Congress, presidential proclamations and executive orders, and federal regulations. The chief administrator of NARA, the Archivist of the United States, not only maintains the official documentation of the passage of amendments to the U.S. Constitution by state legislatures, but has the authority to declare when the constitutional threshold for passage has been reached, and therefore when an...</freebase-description>
    <freebase-pref-name>National Archives and Records Administration</freebase-pref-name>
    <id type="integer">1929</id>
    <is-private type="boolean">false</is-private>
    <name>National Archives and Records Administration</name>
    <stock-symbol></stock-symbol>
    <updated-at type="datetime">2011-07-10T01:03:17Z</updated-at>
  </primary-organization>
  <secondary-organizations type="array"/>
  <summary>
    <summary>Veterans records on improperly disposed hard drive puts millions at risk</summary>
  </summary>
  <comments type="array">
    <comment>
      <content>from	GaryM Stern GaryM.Stern@nara.gov
to	curators@datalossdb.org
date	Mon, Jun 27, 2011 at 4:37 PM
subject	Incorrect Reporting of Data Breach

We have just learned that your website lists the National Archives and Records Administration (NARA) as being responsible for one of the &#8220;largest incidents&#8221; of data loss, concerning approximately 76 million persons in 2009, listed at:  http://datalossdb.org/ 
 
We respectively request that you remove this item from your list, because no actual breach of data occurred.  Rather, as we reported on our website in 2010, the defective disk, which came from a disk array that contained the data, was properly disposed of by authorized contractors. 
http://www.archives.gov/press/press-releases/2010/nr10-05.html
 
Your website relies on an article published in wired.com, which was describing an internal NARA investigation of a &#8220;potential data breach&#8221; (emphasis added).  Upon completing our review of this incident, we confirmed that the defective disk had been destroyed by the authorized servicing contractor, and there was no evidence of any access, misuse, or disclosure. 
 
We would greatly appreciate your removing this item from your list, in order not to give a false impression that this data had actually been breached by the National Archives. 
 
I would be happy to discuss our concerns directly with you in more detail.  Please feel free to contact me at the numbers below.
 
Sincerely,
 
Gary M. Stern
General Counsel and Senior Agency Official for Privacy
National Archives and Records Administration
8601 Adelphi Road, Suite 3110
College Park, MD  20740-6001
301-837-1750 (main)
301-837-3026 (direct)
garym.stern@nara.gov</content>
      <created_at>2011-07-05 21:24:50 UTC</created_at>
    </comment>
  </comments>
  <location>
    <address>Washington D.C., DC, USA</address>
    <thoroughfare_name></thoroughfare_name>
    <dependent_locality_name></dependent_locality_name>
    <locality_name>Washington D.C.</locality_name>
    <sub_administrative_area_name></sub_administrative_area_name>
    <administrative_area_name>DC</administrative_area_name>
    <postal_code_number></postal_code_number>
    <country_name_code>US</country_name_code>
    <longitude>38.8951</longitude>
    <latitude>-77.0364</latitude>
    <accuracy>4</accuracy>
  </location>
</incident>

