This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1557

SUMMARY

Personal information about name, address, social security number, driver's license number, credit card details accessed by unauthorised person by hacking in the system
Records	130,000
Record Types	CCN NAA MISC ACC FIN FIN
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	Merchant America
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	osf1

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2007-01-24	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2007-02-06	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2007-03-23	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
300,000	2000-01-10	CD Universe
98,000	2001-03-05	Amazon, Bibliofind.com
310,000	2005-04-12	LexisNexis, Accurint, Seisint, Port Orange Police Department , Reed Elsevier
140,000	2005-11-26	Troy Group, Scottrade

Address: California, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$7,800,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Personal information about name, social security number, date of birth etc accessed by unauthorised person
Filename	Source	Researcher	Incident IDs
NH_merchant.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/1557'>1557</a>
Records	File Date	Uploaded	Updated
482	2007-03-23	2008-12-04	23 Sep 13:36
Excerpt
Ofllcc of tho Atto1·11c:y Ciom:1·::Li Smit: of Now H€il'I`lp`Sl'[l.I‘€ 33 Ca1pitoll.St:?c:ot Co.nc»o·zid,, Nji~{ 033()l £}cifs.=·c:g;¤ Vin USPS Trackizaglwv. EQ 21 43{M342 US RE: §);l`otilHcaiio11 o...

add details to this primary source Description

Filename	Source	Researcher	Incident IDs
NC_merchant_america.pdf	North Carolina Department of Justice, Consumer Protection Division	cwalsh	<a href='/incidents/show/1557'>1557</a>
Records	File Date	Uploaded	Updated
3237	2007-04-04	2008-12-11	23 Sep 19:06
Excerpt
t,/r gp r 1*w~ a / err; H o WJ J V North Carolina Security Breach Reporting Form Pursuant to the Identity Theft Protection Act of 2005 Name of Business Owning or Licensing Information Affected by the...

add details to this primary source Description
Personal information of customers accessed by unauthorized hack
Filename	Source	Researcher	Incident IDs
ME_03262007_merchant_america.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/1557'>1557</a>
Records	File Date	Uploaded	Updated
437	2007-03-23	2009-01-29	09 Feb 06:46
Excerpt
CONSUMER PROT Office ofthe Attomey G€U€Y3l Eil§;;ErE)DNlS\|ON State ofMaine 6 State House Station ~· ( Augusta; ME 04333 MAR 2 J Delivery Via USPS Tracking N0. EQ 214304311 US OFFICE OF ATTORNEY GEN...

add details to this primary source Description
Personal information accessed by unauthorised person by hacking
Filename	Source	Researcher	Incident IDs
NY_merchant_america1.pdf	New York State Consumer Protection Board	cwalsh	<a href='/incidents/show/1557'>1557</a>
Records	File Date	Uploaded	Updated
6817	2007-03-22	2008-12-25	13 Feb 09:37
Excerpt
as/2272aav 12: ria iaesaeasess xeraesscnizx ease: at l _ . L oa ·*=;¥ “T§t,¤c»·~, ` . at ''fe Reporting Form For Business, Individual or NY State Entity reporting a "Breach ofthe Security...

add details to this primary source Description
An unauthorized computer intrusion occured into one of the companies databases. The database that was accessed by an unauthorized person contained a combination of one or more of the following types of personal information about consumers who engaged in transactions with one or more of the merchants to whom they provid payment processing services: name; bank account number; and/or drivers license number.
Filename	Source	Researcher	Incident IDs
2007-03-23_Merchant_America.pdf	Hawaii Office of Consumer Protection	d2d	<a href='/incidents/show/1557'>1557</a>
Records	File Date	Uploaded	Updated
870	2007-03-23	2009-03-18	09 Apr 06:36
Excerpt
. ` l {spl ,.j» ' ’ V. .*-7 ’·- [ _ . r J J. ji . :5 -/ { . State of Hawaii Department of Commerce and Consumer Affairs ATTN: Office of Consumer Protection Lciopapa A Kamehameha Building 235 S...