This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 441

SUMMARY

Credit card numbers of 9,240 on hacked server
Records	9,240
Record Types	CCN
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	Life Is Good
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Anonymous

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2006-08-17	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2006-09-19	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2006-08-30	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
15,700	2000-11-14	Western Union
15,000	2005-04-12	Eastern National, National Park Service
14,277	2006-04-28	U.S. Department of Defense, Tricare Management Activity
9,300	2006-05-19	Unknown Organization, Frost Bank

Address: USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$554,400.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Business breached is Life is good, Inc. (Lig), 15 Hudson Park Drive, Hudson, NH, 03051. Form states affected is 328 in NC out of estimated 9,240 total. Form submitted on September 13, 2006, but states they had initial correspondence on August 23, 2006. Breach discovered August 17, 2006, when several customers called saying they had been notified of unusual/suspicious charges on their credit cards after having generated transactions with Lig. Company determined access achieved via either SQL injection or deciphering a password. Correction was made by: restricting IP access, changing passwords, deleting existing data, and creating SQL trigger warning. Of note: There is a 10-instance discrepancy reflected between this report and the initial "First Incidence ID" (9,240 v 9,250).
Filename	Source	Researcher	Incident IDs
NC_life_is_good.pdf	North Carolina Department of Justice, Consumer Protection Division	cwalsh	<a href='/incidents/show/441'>441</a>
Records	File Date	Uploaded	Updated
328	2006-09-13	2008-12-11	23 Sep 19:15
Excerpt
North Carolina Security Breach Reporting Form Pursuant to the Identity Theft Protection Act of 2005 Name of Business Qwning or Licensing lnformation Affected by the PLEASE SUBMIT FORM T0: Breach; tsj...