This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1055

SUMMARY

Stolen backup tape contains employee Social Security numbers
Records	105,363
Record Types	SSN NAA DOB
Breach Type	Stolen Tape
Data Family	Electronic
Source	Outside
Organization	Bristol-Myers Squibb Co.
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Lyger

STOCK PRICE

Chart?chxt=x,y&chxl=0:|jul-7|jul-25|aug-14|&chxr=1,20.60,23.92&cht=lc&chd=t:20.6,21.65,21.55,21.5,21.12,21.1,21.66,22.38,22.54,22.23,21.83,21.68,21.89,22.12,22.14,21.91,21.53,21.51,21.12,21.11,21.39,21.82,21.89,21.67,22.31,22.44,22.2,21.98,21.88,21.98,21.75,21.48,21.52,21.9,22.34,21.98,21.98,21.52,21.64,21.34|22.40,22.40,22.78,22.78,22.26,22.26,22.42,22.42,22.17,22.17,21.97,21.97,21.73,21.73,22.27,22.27,22.54,22.54,22.55,22.55,22.53,22.53,22.84,22.84,22.93,22.93,22.40,22.40,22.49,22.49,22.08,22.08,22.59,22.59,22.97,22.97,22.67,22.67,22.54,22.54,22.34,22.34,22.98,22.98,23.06,23.06,22.64,22.64,23.18,23.18,23.34,23.34,23.06,23.06,23.00,23.00,23.12,23.12,23.22,23.22,22.87,22.87,22.65,22.65,22.79,22.79,22.85,22.85,23.11,23.11,22.66,22.66,22.74,22.74,22.92,22.92,23.26,23.26,22.94,22.94&chds=20.60,23.92&chco=008000,aaffff,ffaaff,ffffaa&chs=460x320&chm=v,990066,0,9,1

SIMILAR INCIDENTS

records	date	organizations
120,000	2007-06-14	Unknown Organization, Coastal Community Credit Union
300,000	2011-03-01	Cord Blood Registry, CBR Systems, Inc.

SPONSOR

Zecurion protects organizations worldwide, with more than 5,000 global deployments, using its award-winning software security solutions. Zecurion’s solutions create a “locked-vault” around data on servers, backup storage media, e-mail, peripheral devices and printers that both monitors and prevents unauthorized access.

TIMELINE

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2008-06-04	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2008-07-17	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2008-07-12	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

MAP OF INCIDENT LOCATION

Address: 345 Park Ave, New York, NY 10022, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

bristol-myers.pdf

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate ¹

$6,321,780.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 134

add details to this primary source Description
Stolen back-up tape containing personal information about name, address, date of birth, Social Security Number and employment related data. 901 Maryland residents affected.
Filename	Source	Researcher	Incident IDs
MD_ITU-154890.pdf	Maryland Attorney General	kirniki	<a href='/incidents/show/1055'>1055</a>
Records	File Date	Uploaded	Updated
901	2008-07-10	2008-12-04	23 Sep 12:41
Excerpt
James l\/l. Beslity Senior Counsel, Global Privacy and Records l\/lanagement Law Department X v gi " Tr) i _ ¤ F i - i%l"1§i®i~l)/E`)/@1"S §tt`tl1iJiJ @®lTtt’fl@lt`l§7 P. o. eax 4000 Princeton, NJ cs...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1312

add details to this primary source Description
Back-up tape containing personal information stolen in transit
Filename	Source	Researcher	Incident IDs
VA_07142008_bristol-meyers_squibb.pdf	Virginia Attorney General	jkouns	<a href='/incidents/show/1055'>1055</a>
Records	File Date	Uploaded	Updated
976	2008-07-11	2009-02-03	04 Feb 11:10
Excerpt
Jarnes tv? Brsszity Senror Gcirnsel. Glotaal l’r¤·.~ec~.· arti: Fetstiitis;. l.-l.ai·=rgi.=ine·" _ _ L.£lwDepar‘trni=;nt SClt1ii3i3 l;Oi'i"1t3?1IiV no tsriirieee ¤-—i»ee·si-i. t.ouas¤z:5..i<·.;—;. “l...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1015

add details to this primary source Description
Stolen back-up tapes containing personal information of employees
Filename	Source	Researcher	Incident IDs
20080711-Bristol_Mysers_Squibb.pdf	Maine Attorney General	d2d	<a href='/incidents/show/1055'>1055</a>
Records	File Date	Uploaded	Updated
143	2008-07-11	2009-01-12	14 Feb 17:32
Excerpt
James M. Beelity Senior Counsel, Global Privacy and Records Management Law Department Bristol-Myers COI“I1[)ZlI'1Y P.O.Box anno Princeton, NJ oasas-4000 '@ Tel 609-252-5742 Fax 609-252-3093 james.b...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1799

add details to this primary source Description
North Carolina Data Breach Notification : Backup tape lost containing 5526 NC residents personal information, including name, address, SSN, DOB
Filename	Source	Researcher	Incident IDs
20080711_Bristol_Myers.pdf	North Carolina Department of Justice, Consumer Protection Division	d2d	<a href='/incidents/show/1055'>1055</a>
Records	File Date	Uploaded	Updated
5526	2008-07-11	2009-06-13	14 Jun 18:59
Excerpt
, ru1..1e.2 oe 11Z24PI"l ems comsumare sores ‘ "" _ " ' 'O· EIB p` “`" b `°“ ""' S North Carolina Security Breach Reporting Form Pursuant to the Identity Theft Protection Act of 2005 I Name of Bus...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1338

add details to this primary source Description
New Hampshire Data Breach Notification : Stolen backup tape contained employee information including name, address, DOB, SSN and bank account details and potentially of dependants too.
Filename	Source	Researcher	Incident IDs
bristol-myers.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/1055'>1055</a>
Records	File Date	Uploaded	Updated
458	2008-07-11	2009-02-17	15 Jun 07:55
Excerpt
James M Besttty Semor Cotmset. Siena! Prwaey and Records; Management V I`W_ Lowwzgsartmont ?§oPuibb Company tr eexttoou erases,u..¤sseta»r¤r;»a " `A Ta§<;Q Fax 6GQ—2t53-3i}§3 games.boe...