<?xml version="1.0" encoding="UTF-8"?>
<incident>
  <arrest type="boolean">false</arrest>
  <breach-type-id type="integer" nil="true"></breach-type-id>
  <comments-count type="integer">3</comments-count>
  <data-family-id type="integer">3</data-family-id>
  <data-recovered type="boolean">false</data-recovered>
  <disputed type="boolean">false</disputed>
  <fringe type="boolean">false</fringe>
  <fringe-description></fringe-description>
  <id type="integer">2613</id>
  <lawsuit type="boolean">false</lawsuit>
  <records type="integer">60</records>
  <submission-id type="integer">1764</submission-id>
  <updated-at type="datetime">2010-03-23T12:19:25Z</updated-at>
  <user-id type="integer">3</user-id>
  <breach-types type="array">
    <breach_type>
      <name>Fraud Se</name>
    </breach_type>
  </breach-types>
  <data-types type="array">
    <data_type>
      <short_name>SSN</short_name>
    </data_type>
    <data_type>
      <short_name>NAA</short_name>
    </data_type>
    <data_type>
      <short_name>DOB</short_name>
    </data_type>
  </data-types>
  <timeline-items type="array">
    <timeline_item>
      <first_date>2010-03-23 00:00:00 UTC</first_date>
      <type>Organization reports incident</type>
    </timeline_item>
  </timeline-items>
  <vector>
    <name>Inside - Malicious</name>
  </vector>
  <primary-organization>
    <business-type-id type="integer">1</business-type-id>
    <freebase-cached-data type="yaml" nil="true"></freebase-cached-data>
    <freebase-description></freebase-description>
    <freebase-pref-name>Cortisol</freebase-pref-name>
    <id type="integer">197</id>
    <is-private type="boolean">false</is-private>
    <name>H&amp;R Block</name>
    <stock-symbol>HRB</stock-symbol>
    <updated-at type="datetime">2012-05-08T20:48:23Z</updated-at>
  </primary-organization>
  <secondary-organizations type="array"/>
  <summary>
    <summary>Tax preparer steals more than 60 customers names, addresses, Social Security numbers</summary>
  </summary>
  <comments type="array">
    <comment>
      <content>H&amp;R Block terminated an office manager named Rebecca Erdmann from the Winona, Minnesota, office on May 1, 2009, for illegally disclosing client data. On November 24, 2009, H&amp;R Block sold the same office to Ms. Erdmann and a five-person partnership she formed called &quot;Tax Smart LLC of Winona&quot; with no regard for client privacy and confidentiality.  Minnesota Statute 325E.61 required H&amp;R Block to notify the public of the data breach.  H&amp;R Block is covering up Ms. Erdmann's criminal activity.  Please contact the managers who assisted Ms. Erdmann in her crimes.  Kelly Pearson kpearson@hrblock.com and Mike Duncan mduncan@hrblock.com.  Ms. Erdmann has access to all H&amp;R Block client data nationally through the H&amp;R Block tax vault.  </content>
      <created_at>2010-04-05 15:12:31 UTC</created_at>
    </comment>
    <comment>
      <content>Kelly Pearson, District Manager for H&amp;R Block was aware of Rebecca &quot;Becky&quot; Erdmann's criminal activity and needs to be held accountable for allowing the data breach by Ms. Erdmann.  Kelly Pearson had a friendship with Becky Erdmann that allowed the criminal activity to escalate.  H&amp;R Block and Kelly Pearson need to explain why Becky Erdmann was fired and then brought back as a business owner of the franchise she was fired from.  Everyone who uses H&amp;R Block needs to be aware of the risks and dangers caused by Becky Erdmann and Kelly Pearson, especially everyone in the Winona, Minnesota, area.  Please contact Brian Woram who handles legal matters for H&amp;R Block at brian.woram@hrblock.com </content>
      <created_at>2010-04-28 14:54:37 UTC</created_at>
    </comment>
    <comment>
      <content>I called the H&amp;R Block corporate office in Kansas City, Missouri, and Rebecca Erdmann was indeed fired for illegal disclosure of client financial data from the Winona, Minnesota, office on May 1, 2009.  The Winona Mall H&amp;R Block office.  It is odd the Ms. Erdmann is now a franchise owner of an office she was fired from less than one year ago.  </content>
      <created_at>2010-04-29 13:44:14 UTC</created_at>
    </comment>
  </comments>
  <location>
    <address>Highland, IN, USA</address>
    <thoroughfare_name></thoroughfare_name>
    <dependent_locality_name></dependent_locality_name>
    <locality_name>Highland</locality_name>
    <sub_administrative_area_name>Lake</sub_administrative_area_name>
    <administrative_area_name>IN</administrative_area_name>
    <postal_code_number></postal_code_number>
    <country_name_code>US</country_name_code>
    <longitude>41.5536</longitude>
    <latitude>-87.452</latitude>
    <accuracy>4</accuracy>
  </location>
</incident>

