| Backup tapes stolen from car containing 5,117,799 patients' names, phone numbers, Social Security numbers, and medical information | |
| Records | 5,117,799 |
|---|---|
| Record Types | SSN NAA MISC MED |
| Breach Type | Stolen Tape |
| Data Family | Electronic |
| Source | Outside |
| Organization | Science Applications International Corp (SAIC) |
| Other Affected/Involved Organizations | Tricare Management Activity |
| Lawsuit? | YES |
| Data Recovered? | NO/UNKNOWN |
| Arrest? | NO/UNKNOWN |
| Submitted By: | Dissent |
| Date | Event |
|---|---|
| 2011-09-13 | Incident Occurred |
| 2011-09-14 | Incident Discovered By Organization |
| 2011-09-28 | Organization Reports Incident |
| None. Add Data | Organization Mails Notifications |
| None. Add Data | Records Recovered |
| 2011-10-11 | Lawsuit Filed |
| None. Add Data | Arrest Made |
| records | date | organizations |
|---|
Zecurion protects organizations worldwide, with more than 5,000 global deployments, using its award-winning software security solutions. Zecurion’s solutions create a “locked-vault” around data on servers, backup storage media, e-mail, peripheral devices and printers that both monitors and prevents unauthorized access.
Address: San Antonio, TX, USA
Have a better address for this incident? Suggest it!
suggest a new attachment
Known Actual Costs
|
Estimated Costs
|
|||
|
||||
by Anonymous on 2011-11-09 (7 months ago)
This is the second time health care information loss by a contractor responsible for its security has been compromised. Let make SAIC pay every single person that had information on the tapes pay the equivalent of five years of ID theft protection. Paid in form of check, and then everyone that had their information on these tapes can make their own decision on how to spend it. Until companies are held financially accountable for sloppy information security practices, nothing will change and the people will continue to get screwed over.
by Anonymous on 2011-11-12 (6 months ago)
Agee 100% with anonymous...the last time my idenity was stolen it took me a year to figure out that someone had used my information and then 5 years to correct it. One collection company sold the debt to another collection company who sold it to another collection company. until finally someone realized that I kept all my rebuttal paperwork together...so they went after some other unsuspecting person. Why is it that companies are so quick to give credit without verifying the person's true idently...
by Anonymous on 2011-11-15 (6 months ago)
How do we join the lawsuit?
by Anonymous on 2011-11-16 (6 months ago)
I agreed with all of you. I just got the leeter in the mail today on behalf on my daughter's identity. I'm shocked this could happen! Millions of innocent people's identity gone.I just hope my daughter's SSN doesn't get sold, for a illegal mexican to pose as her.
by Anonymous on 2011-11-21 (6 months ago)
Considering SAIC's track record (http://archive.pogowasright.org/search.php?type=all&query=SAIC&mode=search&Submit=Search), TRICARE or the DoD should be asked what they've done to ensure data was appropriately handled. What is TRICARE's procedures for handling, backing-up and storing HIPAA and Privacy act information? If you hire a company with a track record of incompetence and you handle HIPAA and Privacy Act Data, doesn't the responsibility rest squarely on your shoulders?
by Anonymous on 2011-11-28 (6 months ago)
This SAIC employee should be criminally prosecuted for his/her failure to protect and secure this sensitive data. Period1
by Anonymous on 2011-11-28 (6 months ago)
I was notified by our military base that this is a scam
by Anonymous on 2011-11-29 (6 months ago)
Really? To get their 1 year free credit monitoring, they're asking me to mail in my SSN, DOB, Signature, and address. They still don't seem overly concerned about privacy. I would say paying the cash value of a year of credit monitoring is much more fair - I don't want the crappy offline service they're giving.
by Anonymous on 2011-11-29 (6 months ago)
Really? To get their 1 year free credit monitoring, they're asking me to mail in my SSN, DOB, Signature, and address. They still don't seem overly concerned about privacy. I would say paying the cash value of a year of credit monitoring is much more fair - I don't want the worthless offline service they're giving.
by Anonymous on 2011-12-14 (5 months ago)
Not only do I not really want the service they are offering, which by the way doesn't offer that much of a feeling of security and rarely do people that have their identity stolen "bounce back" in any timely manner, but get this: this company sends me a letter saying WE LOST YOUR SSN and attached is a form where the first box asks me to mail them, in writing on paper, my SSN. Are you serious? If you want my SSN go ask the people that stole it from you!