This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 704

SUMMARY

Employee downloads file containing sensitive information
Records	21,902
Record Types	SSN NAA
Breach Type	Unknown
Data Family	Unknown
Source	Outside
Organization	UPS
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Anonymous

records	date	organizations
41,000	2006-06-29	National Institutes of Health Federal Credit Union (NIHFCU)
65,000	2007-06-27	Milwaukee PC
29,500	2009-02-06	Kaiser Permanente, Service Employees International Union - United Healthcare Workers West (SEIU-UHW)

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2007-02-02	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2007-06-09	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2007-06-11	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

Address: USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$1,314,120.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Employee downloads personal information names, address, Social Security number and employee identification number by mistake
Filename	Source	Researcher	Incident IDs
NH_UPS.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/704'>704</a>
Records	File Date	Uploaded	Updated
142	2007-06-08	2008-12-04	23 Sep 15:44
Excerpt
bt; hlcnlaske Parkwm;, NE _ `<>~°__ Ftilmitas, UA EGBES Qlunc S, 2007 M5.iK€1i,}’ A. Ayuttc Attmtmzy Gtzttcml Stattc mf `Ntzw Httmps hitt: 33 Capital Sttrcct Cmtctml, NH {E30} RE; Rtspurt of brcm...

add details to this primary source Description
During a routine information systems audit, UPS discovered that names, Social Security Numbers, employee identification numbers, and job classification and status information had been downloaded to a UPS computer from our network by an employee of UPS. The information appears to have been downloaded along with an unrelated software program that was believed to be the focus of the download. They did not find any evidence that the employee intended to access, misuse or disclose the private information.
Filename	Source	Researcher	Incident IDs
2007-06-18_UPS.pdf	Hawaii Office of Consumer Protection	d2d	<a href='/incidents/show/704'>704</a>
Records	File Date	Uploaded	Updated
173	2007-06-18	2009-03-18	05 Apr 17:04
Excerpt
M ps legal Department i °"' 55 Glenlake Parkway, NE __ Atlanta, GA 30328 June l8, 2007 Mr. Stephen H. Levins Executive Director Hawaii Office of`Consumer Protection Leiopapa A Kamehameha Building 235...

add details to this primary source Description
North Carolina Data Breach Notification : Employee downloaded unauthorised information to their computer containing personal information.
Filename	Source	Researcher	Incident IDs
NC_UPS.pdf	North Carolina Department of Justice, Consumer Protection Division	cwalsh	<a href='/incidents/show/704'>704</a>
Records	File Date	Uploaded	Updated
871	2007-06-21	2008-12-11	23 Sep 19:14
Excerpt
North Carolina Security Breach Reporting Form Pursuant to the Identity Theft Protection Act of 2005 Name of Business Owning or Licensing information Affected by the PLEASE SUBMIT FORM Breach: United...

add details to this primary source Description
Maine Data Breach Notification : UPS Employee downloaded personal information whilst downloading software.
Filename	Source	Researcher	Incident IDs
ME_06182007_ups.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/704'>704</a>
Records	File Date	Uploaded	Updated
71	2007-06-18	2009-01-29	08 Jun 19:57
Excerpt
legal Department i` 55 Glenlake Parkway, NE V Atlanta, CA 30328 June 18, 2007 i Mr. Steven Rowe S ` I Attorney General State of Maine A 6 State House Station Augusta, ME 04333 Dear Mr. Rowe: - We are...