This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1712

SUMMARY

Personal information of customers accessed by an unauthorised person by hacking the webste
Records	4,500
Record Types	SSN NAA
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	Voxant
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	osf1

Date	Event
2007-06-20	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2007-07-24	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2007-08-31	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2007-08-31	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

records	date	organizations
2,800	2005-12-12	Aid To The Church In Need
3,800	2005-12-19	Guidance Software
9,300	2006-05-19	Unknown Organization, Frost Bank
13,000	2006-06-27	AAAAA Rent-A-Space

Address: Virginia, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$270,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
A phishing attack, hosted on a Voxant server was discovered. Encrypted Credit Card information was obtained for approximately 4500 records, in addition the encryption key was also not well protected in the application database and is suspected of being compromised as well. The file also includes a sample letter to customers.
Filename	Source	Researcher	Incident IDs
ME_09172007_voxant.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/1712'>1712</a>
Records	File Date	Uploaded	Updated
0	2007-08-31	2009-01-19	22 Mar 19:08
Excerpt
VO , _ [ _ SEP 1 2 2037 Headquarters, Maine State Police 42 State House Station 45 Commerce Drive Augusta, ME 04333-0042 _ _ August 31, 2007 Dear Sirs: l am writing to inform you that our c...

add details to this primary source Description
Hawaii Data Breach Notification : Website hacked and exposed credit card numbers
Filename	Source	Researcher	Incident IDs
2007-08-31_Voxant.pdf	Hawaii Office of Consumer Protection	d2d	<a href='/incidents/show/1712'>1712</a>
Records	File Date	Uploaded	Updated
Not yet entered	2007-08-31	2009-03-18	21 May 11:43
Excerpt
- <* .- rim. ~ lk Q " VOXAI\\|`\|{j_— . » . . , ) mw 5/ Hawaii State Consumer Protection Division Leiopapa A Kamehameha Building 235 South Beretania Street, Suite 801 Honolulu, Hawaii 96...

add details to this primary source Description
North Carolina Data Breach Notification : voxant website was hacked, providing access to credit card information.
Filename	Source	Researcher	Incident IDs
20070831_voxant.pdf	North Carolina Department of Justice, Consumer Protection Division	d2d	<a href='/incidents/show/1712'>1712</a>
Records	File Date	Uploaded	Updated
10	2007-08-31	2009-06-13	14 Jun 18:44
Excerpt
e Hug 31 O'? 05:2Sp V0xant.,i.nc 7033912918 P·1 _ North Carolina Security Breach Reporting Form Pursuant to the Identity Theft Protection Act of 2005 Name of Business • - ing or Licensing informatio...

add details to this primary source Description
Maine breach notification - Voxant hacked website exposes customers credit card details. 4500 total exposed. unknown number of Maine residents affected
Filename	Source	Researcher	Incident IDs
ME_09042007_voxant.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/1712'>1712</a>
Records	File Date	Uploaded	Updated
0	2007-08-31	2009-01-29	14 Jun 18:54
Excerpt
Conti, Linda From: Mediation, Consumer Sent: Tuesday, September 04, 2007 10:46 ANI To: McKenna, Jim; Conti, Linda Subject: FW: Communication regarding hacker incident Attachments: Sample Customer Let...