This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 255

SUMMARY

15,000 W-2 forms containing Social Security numbers and addresses lost in mail
Records	15,704
Record Types	SSN NAA FIN
Breach Type	Lost Tape
Data Family	Electronic
Source	Outside
Organization	Con Edison
Other Affected/Involved Organizations	Unknown Organization
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Anonymous

TIMELINE

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2006-03-27	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2006-04-01	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2006-03-30	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

SIMILAR INCIDENTS

records	date	organizations
20,000	2006-04-27	Iron Mountain, Long Island Railroad
13,700	2006-07-25	Unknown Organization, Cablevision
47,000	2007-05-01	JPMorgan Chase

SPONSOR

Zecurion protects organizations worldwide, with more than 5,000 global deployments, using its award-winning software security solutions. Zecurion’s solutions create a “locked-vault” around data on servers, backup storage media, e-mail, peripheral devices and printers that both monitors and prevents unauthorized access.

MAP OF INCIDENT LOCATION

Address: USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

http://attrition.org/dataloss/2006/04/coned01.html [archive]

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate ¹

$942,240.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 600

add details to this primary source Description
15,704 Con Edison W-2 forms on backup tapes containing Social Security numbers and addresses lost in mail
Filename	Source	Researcher	Incident IDs
ConEd-20060327_MERGED.PDF	New York State Consumer Protection Board	cwalsh	<a href='/incidents/show/255'>255</a>
Records	File Date	Uploaded	Updated
Not yet entered	2006-03-30	2008-12-04	23 Sep 17:15
Excerpt
new-sa-2aae is=sv 212 srv sesa 212 are ease P.@21 _ y »§—’;¢j i'? i,t¤‘g ’ Z 1,] i _ Reporting Form gf;. For Business, Individual or NY State Entity reporting a §·1.§`~'§·*_,j{{; "Breach of the Se...

Click here for the Full Details | Download Raw PDF

COMMENTS

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
Disposal Mobile | Email | Fax | Fraud Se
Hack | Lost Computer | Lost Document | Lost Drive
Lost Laptop | Lost Media | Lost Mobile | Lost Tape
Missing Document | Missing Laptop | Missing Media | Snail Mail
Stolen Computer | Stolen Document | Stolen Drive | Stolen Laptop
Stolen Media | Stolen Mobile | Stolen Tape | Unknown
Virus | Web |