This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1492

SUMMARY

Unauthorised access of person details of online customer by other online customers due to website issue
Records	582
Record Types	CCN SSN NAA MISC FIN
Breach Type	Web
Data Family	Electronic
Source	Outside
Organization	H&R Block
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	osf1

records	date	organizations
750	2007-06-18	Parisexposed.com
1,400	2008-07-12	Bank Pekao SA
988	2006-10-05	Homecomings Financial Network Inc
341	2008-12-04	Economic Research Institute

Date	Event
2008-04-10	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2008-04-10	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2008-06-04	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

Address: Missouri, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$34,920.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Unauthorised access to personal information of some customers by other customers due to some error in the website
Filename	Source	Researcher	Incident IDs
MD_ITU-153113.pdf	Maryland Attorney General	kirniki	<a href='/incidents/show/1492'>1492</a>
Records	File Date	Uploaded	Updated
Not yet entered	2008-06-04	2008-12-04	23 Sep 12:18
Excerpt
tax, accounting and financial senxices ‘ `~~ii~’ V`` ” “`'> . I t` CF Nil iéiikfxl Q} ?* I. Zfiiii .503*1 ~ 5 I3 E 0 Office of the Maryland Attorney General Attorney General...

add details to this primary source Description
New York Data Breach Notification : Website problems may have allowed other users to view message boards with other users personal information.
Filename	Source	Researcher	Incident IDs
HR-Block-DigitalTax-FS.pdf	New York State Consumer Protection Board	cwalsh	<a href='/incidents/show/1492'>1492</a>
Records	File Date	Uploaded	Updated
33	2008-06-05	2009-05-08	03 Aug 23:23
Excerpt
V. ·· ¤;,;;:_2_ “Watson, Catherine" To , , ' - 'S:!:!:¥:¥:¥:¥:- . .;;i`·, OB/USIZOOS 05.20 PM <brea...

add details to this primary source Description
Maine Data Breach Notification : Online users may have had access to other users message boards and there exposed personal details.
Filename	Source	Researcher	Incident IDs
20080604-HR_Block.pdf	Maine Attorney General	d2d	<a href='/incidents/show/1492'>1492</a>
Records	File Date	Uploaded	Updated
Not yet entered	2008-06-04	2009-01-12	03 Aug 23:24
Excerpt
0 0 H&R BLOCK" tax, accounting and financial services Office of the Maine Attomeey General Attorney General Stesven Rowe 6 State House Station » Augusta, ME 04333 }une 4, ZODB Dear Attorney Gene...