This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1300

SUMMARY

Names, addresses, and credit card numbers exposed by hack
Records	18,432
Record Types	CCN NAA
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	Kiwanis International
Other Affected/Involved Organizations	On-Net Services
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Lyger

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2008-01-04	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2008-01-28	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
15,700	2000-11-14	Western Union
46,000	2001-04-02	ADDR.com
15,000	2005-04-12	Eastern National, National Park Service
32,000	2006-04-12	Ross-Simons

Address: United States
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$1,105,920.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Names, addresses, and credit card numbers exposed by Kiwanis International hack, 149 Maine residents affected.
Filename	Source	Researcher	Incident IDs
20080128-Kiwanis_International.pdf	Maine Attorney General	d2d	<a href='/incidents/show/1300'>1300</a>
Records	File Date	Uploaded	Updated
149	2008-01-28	2009-01-12	17 Jan 10:58
Excerpt
K' ' International Date: January 28, 2008 Dear Ms Conti, AAG, This letter is to inform your agency of our intention to notify state residents of a security breach of our Web site and database. Kiwa...

add details to this primary source Description
Hawaii breach notification - Kiwanis International reports a SQL injection hack to their online customer database exposes names, addresses, credit card numbers and expiration dates. 36 Hawaii residents affected.
Filename	Source	Researcher	Incident IDs
2008-01-28_Kiwanis.pdf	Hawaii Office of Consumer Protection	d2d	<a href='/incidents/show/1300'>1300</a>
Records	File Date	Uploaded	Updated
36	2008-01-28	2009-03-18	13 Apr 21:32
Excerpt
J 9 K" ` International , {1 `_ pi ‘ , * - Q _ 4_ l ·_l`¤; '_ I, _ ` - I -_·,. w.__- · ~' V-i I- -- . _¤ ‘ ,_ ` " `. -- '_ pj, -_ " "-.` . " ' ,. i Date: January 28...

add details to this primary source Description
Kiwanis web site hacked exposing credit card numbers, names, and addresses through SQL Injection attack. 257 Maryland residents affected.
Filename	Source	Researcher	Incident IDs
MD_ITU-147132.pdf	Maryland Attorney General	kirniki	<a href='/incidents/show/1300'>1300</a>
Records	File Date	Uploaded	Updated
257	2008-01-28	2008-12-04	23 Sep 12:18
Excerpt
·II"* xi w r ·_ gr · ir » ~· - _ » , ~ . V It ti ··· - .:::m¤....,..... ". IWB I1 I S mr. I International ` I tx It~ ttt E Date: January 28, 2008 Dear Mr. Williams, This letter is to...

add details to this primary source Description
North Carolina Data Breach Notification : SQL Injection attack reveals credit card information to hackers.
Filename	Source	Researcher	Incident IDs
20080128_kiwanis.pdf	North Carolina Department of Justice, Consumer Protection Division	d2d	<a href='/incidents/show/1300'>1300</a>
Records	File Date	Uploaded	Updated
570	2008-01-28	2009-06-13	03 Aug 21:20
Excerpt
’ North Camlina Security Breach Reporting Form Pursuant to the Identity Thcft Protection Act of 2005 Nmws = t~f Business Owning 01?Licansing Infonnation Affmted by the PLEASE SUBMIT FORM TO; Branch...