This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 4653 To_xml

SUMMARY

Backup tapes stolen from car containing 5,117,799 patients' names, phone numbers, Social Security numbers, and medical information
Records 5,117,799
Record Types SSN NAA MISC MED
Breach Type Stolen Tape
Data Family Electronic
Source Outside
Organization Science Applications International Corp (SAIC)
Other Affected/Involved Organizations Tricare Management Activity
Lawsuit? YES
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: Dissent

TIMELINE

DateEvent
2011-09-13 Incident Occurred
2011-09-14 Incident Discovered By Organization
2011-09-28 Organization Reports Incident
None. Add Data Organization Mails Notifications
None. Add Data Records Recovered
2011-10-11 Lawsuit Filed
None. Add Data Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations

SPONSOR

Zecurion Sponsors DataLossDB

Zecurion protects organizations worldwide, with more than 5,000 global deployments, using its award-winning software security solutions. Zecurion’s solutions create a “locked-vault” around data on servers, backup storage media, e-mail, peripheral devices and printers that both monitors and prevents unauthorized access.

MAP OF INCIDENT LOCATION

Address: San Antonio, TX, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate 1 $307,067,940.00
  1. Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

COMMENTS

by Anonymous on 2011-11-09 (7 months ago)

This is the second time health care information loss by a contractor responsible for its security has been compromised. Let make SAIC pay every single person that had information on the tapes pay the equivalent of five years of ID theft protection. Paid in form of check, and then everyone that had their information on these tapes can make their own decision on how to spend it. Until companies are held financially accountable for sloppy information security practices, nothing will change and the people will continue to get screwed over.

by Anonymous on 2011-11-12 (6 months ago)

Agee 100% with anonymous...the last time my idenity was stolen it took me a year to figure out that someone had used my information and then 5 years to correct it. One collection company sold the debt to another collection company who sold it to another collection company. until finally someone realized that I kept all my rebuttal paperwork together...so they went after some other unsuspecting person. Why is it that companies are so quick to give credit without verifying the person's true idently...

by Anonymous on 2011-11-15 (6 months ago)

How do we join the lawsuit?

by Anonymous on 2011-11-16 (6 months ago)

I agreed with all of you. I just got the leeter in the mail today on behalf on my daughter's identity. I'm shocked this could happen! Millions of innocent people's identity gone.I just hope my daughter's SSN doesn't get sold, for a illegal mexican to pose as her.

by Anonymous on 2011-11-21 (6 months ago)

Considering SAIC's track record (http://archive.pogowasright.org/search.php?type=all&query=SAIC&mode=search&Submit=Search), TRICARE or the DoD should be asked what they've done to ensure data was appropriately handled. What is TRICARE's procedures for handling, backing-up and storing HIPAA and Privacy act information? If you hire a company with a track record of incompetence and you handle HIPAA and Privacy Act Data, doesn't the responsibility rest squarely on your shoulders?

by Anonymous on 2011-11-28 (6 months ago)

This SAIC employee should be criminally prosecuted for his/her failure to protect and secure this sensitive data. Period1

by Anonymous on 2011-11-28 (6 months ago)

I was notified by our military base that this is a scam

by Anonymous on 2011-11-29 (6 months ago)

Really? To get their 1 year free credit monitoring, they're asking me to mail in my SSN, DOB, Signature, and address. They still don't seem overly concerned about privacy. I would say paying the cash value of a year of credit monitoring is much more fair - I don't want the crappy offline service they're giving.

by Anonymous on 2011-11-29 (6 months ago)

Really? To get their 1 year free credit monitoring, they're asking me to mail in my SSN, DOB, Signature, and address. They still don't seem overly concerned about privacy. I would say paying the cash value of a year of credit monitoring is much more fair - I don't want the worthless offline service they're giving.

by Anonymous on 2011-12-14 (5 months ago)

Not only do I not really want the service they are offering, which by the way doesn't offer that much of a feeling of security and rarely do people that have their identity stolen "bounce back" in any timely manner, but get this: this company sends me a letter saying WE LOST YOUR SSN and attached is a form where the first box asks me to mail them, in writing on paper, my SSN. Are you serious? If you want my SSN go ask the people that stole it from you!

New Comment

captcha
Are you human?

Sponsored By: Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.