This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 667

SUMMARY

Stolen laptop contains names and Social Security numbers of about 13,000
Records	13,000
Record Types	SSN NAA
Breach Type	Stolen Computer
Data Family	Electronic
Source	Outside
Organization	Highland Hospital
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	YES
Arrest?	YES
Submitted By:	Anonymous

Date	Event
2007-04-14	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2007-04-16	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2007-05-10	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
16,000	2005-04-26	Gateway File Systems, Christus St. Joseph Hospital
27,000	2005-07-25	KC & Associates, St. John's Regional Med. Ctr.
7,700	2006-11-25	Indiana Department of Health, Family Health Center of Clark County
9,986	2007-02-28	Gulf Coast Medical Center

Address: USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$780,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Stolen laptop contains names and Social Security numbers of about 13,000 Highland Hospital (associated with the University of Rochester, NY) patients.
Filename	Source	Researcher	Incident IDs
NY_University_rochester.pdf	New York State Consumer Protection Board	cwalsh	<a href='/incidents/show/667'>667</a>
Records	File Date	Uploaded	Updated
Not yet entered	2007-05-07	2008-12-25	04 Jan 21:04
Excerpt
‘ ‘ ’ ‘ I ` " ? l"Of£ioeofCou`nSeltbtheI ` I IY ` ` A i I I I V g 4 University of Rochester Medical Center, i _ . . O . S ; Q Uuivmifsi ¤f R¤_¢k¢$¢¢`» Md $§¤¤¤€,H¢¤l*¤ _ ` UN,IVE.RSI.TY.,...