This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 782

SUMMARY

Stolen computers may contain addresses, medical information, and Social Security numbers for "thousands"
Records	68,779
Record Types	SSN MED
Breach Type	Stolen Computer
Data Family	Electronic
Source	Outside
Organization	McKesson Specialty
Other Affected/Involved Organizations	AstraZeneca
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	Anonymous

records	date	organizations
64,030	2006-12-14	Electronic Registry Systems, Geisinger Health Systems, Williamson Medical Center, Emory University, Grady Memorial Hospital
75,000	2007-10-30	Pathology Group of the Mid-South
88,000	2008-05-01	Staten Island University Hospital

Date	Event
2007-07-18	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
2007-07-18	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2007-08-30	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2007-08-31	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

Address: Scottsdale, AZ, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$4,126,740.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Stolen computer containing personal information of patients about name, address, social security number and prescription related details
Filename	Source	Researcher	Incident IDs
NH_AstraZeneca.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
29	2007-08-30	2008-12-04	23 Sep 14:23
Excerpt
SEP·06·2007 THU 03¥l9 PM AZ Managed Markets FAX N0. 3028859312 P. 02 AstraZeneca August 30, 2007 VIA Overnight Mail and Facsimile (603.271.21 10) Lauren J`. Noether Bureau Chief Consumer Protection...

add details to this primary source Description
Stolen computer containing personal information about name, address, social security number and medical information
Filename	Source	Researcher	Incident IDs
ME_09072007_astrazeneca.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
30	2007-08-30	2009-01-19	27 Jan 10:47
Excerpt
,1i /{~\i 5~ » AstraZeneca af August 30, 2007 VIA OVERNIGHT MAIL Linda Conti Attorney General`s Office Burton M. Cross Building, 6th Floor — , - 6 State House Station Augusta, ME 04333 Dear Ms. Conti...

add details to this primary source Description
Stolen computer containing personal information of individuals enrolled in different programs
Filename	Source	Researcher	Incident IDs
ME_09122007_mckesson_corp.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
Not yet entered	2007-09-11	2009-01-19	30 Jan 12:46
Excerpt
McKesson Corporation _r·. MSKES SON Empowering Healthcare Tiemie Lee Senior Counsel direct tcl; 415-983-8863 September 11, 2007 Via Federal Express Attorney General State of Maine 6 State House Sta...

add details to this primary source Description
Computers containing personal information stolen from the company offices
Filename	Source	Researcher	Incident IDs
NH_McKesson2.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
Not yet entered	2007-09-11	2008-12-04	23 Sep 13:08
Excerpt
09/11/2007 15:30 FAX 415983- 369 A LAWDE 002/020 ` _ Mcltosson Corporation ` LAW DEPARTMENT One Post Street San Francisco, CA 94104 415.983.B300 Tel 415.983.93GB Fax . I MSKESSON Empowering Healthc...

add details to this primary source Description
Maine breach notification - McKesson Specialty reported two stolen computers contained personal details of 68,767 names, addresses, Social Security numbers, dates of birth, 270 of which were residents of Maine.
Filename	Source	Researcher	Incident IDs
ME_08302007_mckesson_corp.pdf	Maine Attorney General	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
270	2007-08-30	2009-01-19	13 Apr 20:53
Excerpt
McKessori Corporation CONSUMER PROTECTION DIVISION R E C E I VE D August 29, 2007 MSKESSON 3 O Empowering Hemfhcare Via Overnight Mail OFF! CE OF ATTORNEY GENERAL Attorney General State of Maine 6...

add details to this primary source Description
Two personal computers were stolen which contained addresses, medical information, and social security numbers. Some of the information was encrypted and password protected.
Filename	Source	Researcher	Incident IDs
McKesson.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
987	2007-08-30	2009-02-17	21 Apr 17:16
Excerpt
McKesson Corporation _ One Post Street San Francisco, CA 94104 4159838300 Tel 1 August 20, 2007 MSKESSON Empowering Healthcare Via Overnight Mail and Facsimile — (603) 271-2110 Attomey General Depart...

add details to this primary source Description
North Carolina Data Breach Notification : updated notification of stolen laptops and copies of all 9 letters sent.
Filename	Source	Researcher	Incident IDs
20071015_mckesson.pdf	North Carolina Department of Justice, Consumer Protection Division	d2d	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
3757	2007-10-15	2009-06-13	16 Jul 20:33
Excerpt
i ‘ ‘‘ [ Y »°»‘ D'Y;`;`LON"\D\V-\ ;. - North Carolina Security Breach Reporting ’c0y.;nr"·‘.‘**" " ( 3 I ` »· . Pursuant to the Identity Theft Protection Act f 005 \1 \ R vrlftl it ( Name of Bus...

add details to this primary source Description
New Hampshire Data Breach Notificaiton : McKesson Specialty, AstaZeneca - Theft of two computers contained personal information
Filename	Source	Researcher	Incident IDs
astra_zeneca.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/782'>782</a>
Records	File Date	Uploaded	Updated
29	2007-08-30	2009-08-15	02 Nov 20:14
Excerpt
SEP·06·2007 THU 03¥l9 PM AZ Managed Markets FAX N0. 3028859312 P. 02 AstraZeneca August 30, 2007 VIA Overnight Mail and Facsimile (603.271.21 10) Lauren J`. Noether Bureau Chief Consumer Protection...