This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 378

SUMMARY

Social Security numbers and names of 72 people sold over Internet, over 112,000 more stolen
Records	112,198
Record Types	SSN NAA
Breach Type	Fraud Se
Data Family	Unknown
Source	Inside - Malicious
Organization	Sentry Insurance
Other Affected/Involved Organizations	Accenture
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	YES
Submitted By:	Anonymous

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
None. Add Data	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2006-07-29	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
2006-06-22	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
300,000	2005-09-28	RBC Dain Rauscher
231,000	2006-05-23	Mortgage Lenders Network USA
150,000	2009-04-10	Gexa Energy

Address: Stevens Point, WI, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$6,731,880.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Sentry Insurance, 112,270 claimant records inc name, address, gender, birth date, social security. Stolen by contract IT worker (Ben Schwartz), loaded onto USB stick then offered for sale over internet. User had legitimate access at time of download. 72 records actually sold. User arrested by US Secret Service. Equifax servics offered to all 112,270 record owners.
Filename	Source	Researcher	Incident IDs
Sentry-20060628-NC.PDF	North Carolina Department of Justice, Consumer Protection Division	cwalsh	<a href='/incidents/show/378'>378</a>
Records	File Date	Uploaded	Updated
874	2006-09-08	2008-12-04	23 Sep 15:45
Excerpt
Y .,... ,, . _ ,· . "_ ._‘{- 9'_•.,_ €”A \0rth ( rirnliria Seturitj Hrei . . 9 ` .9 * ' t r Ul Re ortin jF0rm Pursuant to the ldeiitity Tlitlii l' .9.: action Act of 2005 Y·· 9 `E1xm=...

add details to this primary source Description
Sentry insurance breach notification report : Contractor from Accenture stole personal data.
Filename	Source	Researcher	Incident IDs
Sentry-20060628.PDF	New York State Consumer Protection Board	cwalsh	<a href='/incidents/show/378'>378</a>
Records	File Date	Uploaded	Updated
869	2006-08-01	2008-12-04	16 Dec 23:25
Excerpt
_._9_§j01/0.*}.LlE 16¤16 FAX 715 346 7028 stzimtv tivstitttnce E, Om $ Date; August 1, 2006 SENTIU. 1 ’ INSURANCE No. of pages including cover: K `I Tc: CPB· Security Breach Notitication From; Paige...