Home | Protecting Consumers | Safeguarding Children | Seniors | Law Enforcement | Site Map | Search
 

Maryland Information Security Breach Notices - 2012

As of January 2008, any business that retains consumer records is required by Maryland law to notify a consumer who is a resident of Maryland if his or her information is compromised. The "security breach law" also requires the business to notify the Office of the Attorney General. This webpage contains links to all notices sent to the OAG since the law took effect. Below is a chart containing the case number, date of the notice, business name, how many people are affected what information was compromised and how it was lost. For more information on the security breach law, click here.

Breach Notices from: 2012 | 2011 | 2010 | 2009 | 2008
Case Number Date Received Business Name No. of MD residents Total breach size Information breached How breach occurred
215458 1/5/2012 Variable Annuity Life Insurance Company 1273 employee retirement plan information file exposed on website
215459 1/6/2012 AKLIZ, Inc. 2 500 name, phone #, email, username, password, credit card number, expiration date hacking
215460 1/9/2012 Wine Library 466 name, username, password, credit card info hacking (update from wine library breach 11/2011
215461 1/13/2012 Experian 2 name, address, ssn, dob, financial account info unauthorized access to credit report
215457 1/16/2012 Experian 10 name, address, dob, ssn, financial account info unauthorized access to credit report
215462 1/17/2012 The Eric Carle Museum of Picture Book Art 1 name, credit card info hacking
215456 1/18/2012 Experian 1 name, address, SSN, DOB, financial account info unauthorized access to credit report
215463 1/19/2012 HSBC 4 name, address, SSN, credit/debit card info stolen hard drive
215464 1/19/2012 TM Acquisition, LLC 297 12456 name, credt card #, expiration date, security code, address, email, passwords Hacking
215465 1/23/2012 Textron, Inc. 3 name, ssn, dob, address, DL# exposed to other users of recruitment website
215466 1/23/2012 Strategic Forecasting, Inc. 1188 name, credit card info, phone #, email, password hacking
215468 1/23/2012 Guide Publishing Group, Inc. 2 name, credit card info hacking
215469 1/24/2012 New York State Electric and Gas 2801 name, ssn, dob, financial account number unauthprozed access by subcontractor
215470 1/24/2012 IndyMac Resources, Inc. 29 name, ssn, dob file placed on unsecure website
215488 1/27/2012 Hagerty Insurance Agency, LLC 12 name, address, DL#, Policy #, email address, phone #, DOB inadvertant exposure on website
215472 1/31/2012 Winn Dixie 2 name, SSN, dob employee theft
215473 1/31/2012 American Medical Response of Mid-Atlantic 15 name, address, SSN, phone # info accessed at 3rd party contractor
215474 1/31/2012 Valve name, encytped billing address and credit card info hacking
215475 1/31/2012 Regions Financial Corporation 40 63708 name, ssn, dob encrypted flash drive lost in mail
215476 2/3/2012 Millenium Capital Recovery Corporation 6 name, address, SSN info exposed on website
215477 2/7/2012 Motorola Mobility, Inc. 6200 usernames, passwords other information previous owner information not cleared from refurbished tablets
215479 2/7/2012 CubeSmart Management Inc. 4 name, address, DL# files containing lease documents lost
215480 2/13/2012 Courtyard By Marriott Baltimore Downtown/Inner Harbor name, credit/debit card information employee theft/skimming
215481 2/15/2012 American Stock Transfer & Trust Company, LLC 22 name, address, tax ID # tax forms sent to wrong address
215482 2/15/2012 Thorlo 130 name, credit card info hacking
215483 2/16/2012 Electric Insurance Comapny 2 name, DOB, SSN, medical info computer equipment stolen from office
215484 2/17/2012 HTC 58 name, bank routing #, bank account number, HTC account # hacking
215485 2/17/2012 Impairment Resources name, address, SSN, dob, medical info computer equipment stolen from office
215486 2/17/2012 Experian 1 name, address, DOB, SSN, financial account info unauthorized access to credit report
215487 2/24/2012 Burger King Corporation 2 108 name, address, SSN email with job applications sent to wrong address
215489 2/24/2012 WPX Energy, Inc. 7 name, address, SSN SSN visible through envelope window
215491 2/28/2012 Cocoa Cola Company Family Credit Union 42 name, SSN, credit card # stolen laptops
215492 2/28/2012 DHI Mortgage 1829 name, dob, ssn, address,  hacking
215493 2/28/2012 Trident University 2294 username, password, name, address, ssn, dob hacking
215494 2/28/2012 Fresnius Medical Care 1 name, SSN mailing containing customer info sent to wrong customer
215495 2/28/2012 Accucom Corporation 51 name, payment card info hacking
215496 2/29/2012 Univers Workplace Solutions 33 name, address, SSN, stolen laptop
215549 3/1/2012 Univers Workplace Solutions 33 name, ssn, address laptop stolen from car
215550 3/1/2012 Coca Cola Company Family Federal Credit Union 95 name, ssn, credit card # stolen laptops
215551 3/2/2012 Experian 3 Name, address, dob, ssn, financial account info unauthorized access to credit report
215554 3/2/2012 Mercer, Inc. 12 name, address, SSN SSN visible on mailing
215555 3/5/2012 Hackensack University Medical Center 1 name, address, DOB, SSN, DL#, insurance card # employee theft
215557 3/5/2012 State Farm Insurance Companies 31 name, credit card #, bank account info employee theft
215558 3/5/2012 State Farm Insurance Companies 4 name, banking info inadvetant exposure to wrong customers
215559 3/5/2012 GameStop, Inc. 1 20 name, address, ssn w-2 sent to wrong employees
215560 3/12/2012 University of Medicine and Dentistry of New Jersey 16 name, dob, ssn, address, phone#,  computer stolen from office
215566 3/13/2012 State Farm Insurance Companies 123 account information inadvertant exposure to other customers
215562 3/13/2012 Ocean Reef Community
215564 3/14/2012 Kelly Services 1 name, ssn employee theft
215565 3/12/2012 Citibank 22 name, address, email address, account # hacking
215567 3/16/2012 Kaiser Fiundation Health Plan of the Mid-Atlantic States, Inc. 7 name, address, ssn info exposed on non-company equipment
215572 3/19/2012 Washington University in St. Louis 15 name, address, dob, ssn employee theft
215568 3/22/2012 CareFirst BlueCross BlueShield 1 name, ssn, dob records released to wrong patient
215571 3/23/2012 Aricent Group 17 name, address, dob, passport #, ssn laptop theft
215569 3/22/2012 The Orvis Company, Inc. 2 name, payment card info hacking
215573 3/23/2012 AT&T Mobility & Consumer Markets 1 name, credit card # employee theft
215578 3/30/2012 Internet Pipeline, Inc. 1 name, ssn,  inadvertant exposure on website
215575 3/23/2012 AT&T Services, Inc. 30 name, address, SSN, DOB employee theft: information used by employee to establish accounts
215597 4/2/2012 AT&T Services, Inc. 1 name, ssn employee theft
215600 4/2/2012 Pono Products, Inc. 30 name, login info, passwrod, payment card info hacking
215599 4/3/2012 WorldPass Travel Groupd, LLC 18 name, address, email, payment card information Hacking
215601 4/4/2012 BJ's Wholesale Club, Inc. 2 name, address, membership #, DL# used to create new online accounts
215603 4/4/2012 StandardAero 2 Name, credit card # stolen computer
215605 4/4/2012 State Farm Mutual Automobile Company 3 name, address, credit card #, SSN employee theft
215606 4/6/2012 Triad Advisors, Inc. 3 name, ssn, account info inadvertant exposure by subcontractor
215607 4/6/2012 X-Rite Inc. 991 name, address, credit card # hacking
215609 4/6/2012 Experian 4 name, address, ssn, dob, financial account info unauthorized access to credit report
215610 4/10/2012 Sirius XM Radio, Inc. 7 name, credit card information employee theft at subcontractor
215641 4/11/2012 Home Depot USA, Inc. 38 name, address, SSN, financial account info employee theft
215642 4/16/2012 Memorial Healthcare System 2 name, address, dob,ssn employee theft
215643 4/17/2012 NVR Mortgage Finance, Inc. 14 name, address, ssn, account info computer stolen from office
215611 4/18/2012 Massachusetts Mutual Life Insurance Company 43 name, address, SSN, account#, tax ID #,  file sent to wrong recipient
215612 4/20/2012 Indie Research, LLC 68 name, credit card info, address, login info hacking
215613 4/20/2012 Under Armour 2854 name, SSN unencrypted thumb drive lost in mail
215614 4/25/2012 Choice Hotels International, Inc 647 name, address, payment card #, SSN info printed in address field of mailings
215615 4/26/2012 Ameren Corporation 1 name, address, SSN inadvertant exposure to other customers
215616 4/30/2012 Claire's Stores 432 name, address, SSN lost disk containing W-2 info
215617 4/30/2012 Rent-A-Center, Inc. 2 name, address, SSN, DL# computers stolen from office
215619 5/2/2012 Philips 6 name, address, credit card # hacking
215620 5/3/2012 Opening Ceremony Online 22 name, address, credit card # Hacking
215621 5/3/2012 IncorporatingServices, Ltd. 80 name, address, phone #, email, SSN, bank account info, credit card info hacking/virus
215622 5/4/2012 Vantiv LLC 1 name, credit card info accidental exposure to other customers
215623 5/7/2012 Rosenberg & Associates, LLC 15 name, address, SSN, DOB hacking
215625 5/7/2012 Allianz Life Insurance Company on North America 8 name, address, policy #, dob, SSN employee theft
215626 5/8/2012 Dominion Resources, Inc. 14 422 name, account info accidental exposure to other customers
215627 5/10/2012 CNA 1 name, address, SSN, account#, inadvertant exposure to other clients
215628 5/11/2012 University of North Carolina art Charlotte 350000 name, address, SSN, financial account# inadvertant exposure on internet
215631 5/16/2012 L-3 Communications Corporation 10 name, SSN lost flash drive
215632 5/17/2012 Crowne Plaza Columbus Ohio name, address, credit card #, expiration date hacking/virus
215634 5/17/2012 Experian 35 name, address, dob, ssn, financial account info unauthorized access to credit reports
215635 5/18/2012 Procter & Gamble Company 25 name, account info inadvertant exposure to other clients
215637 5/18/2012 Experian 1 name, address, dob, ssn, financial account info unauthorized access to credit report
215638 5/22/2012 ECS Tuning 184 name, address, email, phone #, account password, sbeit or credit card #, expiration date, security code hacking
215639 5/24/2012 Viridian Network, LLC 117 name,SSN, dob,  inadvertant exposure on internet
215640 5/30/2012 Altrec, Inc. 2339 name, credit card #, expiration date, security code hacking
215644 6/1/2012 Dimension Healthcare System name, address, tax ID#, SSN package lost in mail
215645 6/4/2012 The Experts, Inc. name, address, email, ssn stolen laptop
215646 6/4/2012 Emblem Health 13 name, address, phone #, DOB, broker license # employee theft
219252 6/4/2012 Postcard Press, Inc. d/b/a Next Day Flyers   name, address, emai, credit card info Electronic file on system storing transaction information
219253 6/5/2012 Foundations recovery network 3 name, ssn former employee improperly accessed records
215647 6/7/2012 TD Bank 1 name, address, ssn, account # hacking
215648 6/11/2012 Republic Bank and Trust Company 1 12 virus/hacking
215649 6/12/2012 CoreLogic Credco 2 name, address, DOB, SSN, financial account Info stolen loin info used to access credit report
218365 6/13/2012 Owner-Operator Services Inc. 17
215650 6/15/2012 American Education Services 4 name, ssn, inadvertant exposure: sent to wrong client
218367 6/15/2012 Gray Plant Mooty Mooty and Bennett 5 name, ssn stolen laptop after break in
215651 6/18/2012 Franklin Templeton Investor Services LLC 1 name, address, SSN, account# hacking/virus
215652 6/18/2012 Ameritas Life Insurance Company 5 567 name, insurance policy #, DL#, ssn laptop stolen from car
215507 6/19/2012 Woodrow Wilson National Fellowship Foundation 12 name, address, email, SSN inadvertant exposure on website
215653 6/20/2012 Foundation Recovery Network name, ssn, address employee theft
215654 6/20/2012 Good Nite Inn 4 name, address, email, phone #, payment card # paper breach: boxes stolen from locked storage roo,
215655 6/21/2012 Fusion Solutions 7 password protected computer stolen from office
215656 6/21/2012 Buccaneer Computer Systems & Service, Inc. 58 password protected laptop stolen
215471 6/22/2012 Jackson National Life Insurance Company 59 name,contract number and value statements mailed to wrong address
216525 6/25/2012 Global Payments, Inc. unauthorized access to servers
216579 6/25/2012 GoTickets.com 105 An unknown and outside group/individual improperly accessed gotickets.com's database
216608 6/25/2012 Towards Employment  1 names, addreses, SSN Laptop stolen from office
216353 6/26/2012 www.ThePartsBin.com 820 Unauthorized intrusion into website
216562 6/26/2012 Generation Mortgage Company 3
216621 6/27/2012 University of Texas MD Anderson Cancer Center 59 Unencrypted laptop stolen from home of employee. Laptop information contained  names, SSN, medical record numbers, and treatment and/or research information. Unencrypted laptop stolen from home of employee.
217621 6/28/2012 The Depository Trust & Clearing Corporation part 2 employee names, SSN, direct deposit bank account numbers, administrative info about health insurance providers, and other human resources data. DTCC discovered that on March 12, 2012, personal info about some staff members was erroneously placed on an internal system within the company. The info was accesible to staff members within the company's network, but not from outside.
216350 6/29/2012 Adelphi University 1 8 See above.
216619 6/29/2012 TD Bank Name, address, account number, SSN, and DOB. Employee provided info to third party
216707 7/2/2012 Choices, Inc. 1 Health records, including SSN and other health and demographic information was downloaded by the third party. Website was hacked.
216734 7/2/2012 Nebraska State College Systems 173 ssn, Driver's lic number, student id number, related fafsa application, and limited student immunization information, foreign id  number and address. unauthorized intrusion into database
216710 7/6/2012 American Pharmacists Association (APhA) 1114 credit card info, driver's lic numbers website hacked
216733 7/10/2012 Citibank 1 an employee had authorized access to some citi customer credit card accounts 
216732 7/11/2012 One Lavender and Rosemary Lane
216725 7/12/2012 Memorial Healthcare System (MHS) 107 patient names, DOB, SSN. Patient medical records were not changed or deleted. Employees of affiliated physicians' offices may have improperly accessed patient info through a web portal used by physicians who provide care at MHS
216735 7/12/2012 PricewaterhouseCoopers LLP 2 The breach of security involved our work on behalf of an auditing client. A PwC employee  lost an unencrypted thumb drive containing certain information about employees of that client, including a small number of names and Social Security Numbers. Upon learning of the incident, we immediately began conducting an investigation. The loss occurred from within a secured client facility. The breach of security involved our work on behalf of an auditing client. A PwC employee  lost an unencrypted thumb drive containing certain information about employees of that client, including a small number of names and Social Security Numbers. Upon learning of the incident, we immediately began conducting an investigation. The loss occurred from within a secured client facility.
216714 7/16/2012 Scripps College
218908 7/16/2012 TD Bank 1 name, deposit account number, SSN, DOB emplyee provided unauthorized access
216773 7/20/2012 Mission Linen Supply Company 7 the customer name, address, and credit card information (exp. date, CVV and PAN). The company believes there was an illegal intrusion or other potential unauthorized access to the Vendor's servers or database.
216874 7/20/2012 The Surgeons of Lake County, LLC 2 corporate email and electronic medical records. (names, addresses. SSN, credit card numbers, and medical info. Unauthorized person gained remote access to a server and then asked for ransom
216790 7/24/2012 Butler Health System Names, addresses, DOB, SSN, and bank account numbers Unauthorized access
216792 7/24/2012 Austin Rare Coins, Inc. 15 name, credit card info, phone number, home address unauthorized access to company's secured data systems
217624 7/27/2012 MetLife 3 name, SSN, DOB human error
217632 7/30/2012 Cameron, Moberly & Hamrick, PC 19 Info on the laptop includes: name, address, ssn, and/or financial institution account numbers. laptop stolen
218204 7/30/2012 Petco 827 Name, SSN Five laptop computers were stolen 
218203 8/2/2012 Hertz Corporation 44 names, addresses, bank account numbers, and SSN access by unauthorized third party.
218305 8/2/2012 Downtown Baltimore Surgery Center 2500 addresses, SSN Burglary in former office
218364 8/2/2012 PNC Bank
218910 8/2/2012 Experian 1 personal information relating to credit services
218304 8/3/2012 General Motors Company 1 Name and SSN Employee copied spreadsheet to personal device day before retirement. The employee has since deleted the speadsheet.
218363 8/3/2012 First Niagra Bank part 2 1 40 truncated financial account number, name, address, and/or account history and balaces. file error after merging. online customers could view other accounts.
217604 8/7/2012 Glover Park Group 60 name, address, email address DOB, SSN and benefit plan selected. Password protected and encrypted email file containing personal info relating to Glover Park employees was inadvertently sent.
217618 8/7/2012 Nordstrom Bank 249 Nordstrom fsb cardholders were mistakenly sent communications such as cardholder staetments, replacement credit cards, or other correspondence The mistake happened when the business was attempting to reformat mailing addresses.
217617 8/8/2012 GoTickets.com 40 shipping, billing and credit card data Previous security breach on June 20 (ITU - 216579) is likely related to this incident. This event (ITU - 217617) occurred on July 5, 2012. It appears a single administrative account was compromised and used to place malicious files on the gotickets.com web servers, which allowed for the additional improper access.
218361 8/13/2012 Clarksville-Montgomery County School System 3 names, address, SSN, of certain current and former CMCSS employees. computer network hacked
218913 8/13/2012 Columbia Univserity 24 3500 names, addresses, DOB, SSN, bank account info file containing information regarding current and former employees was accidentally placed on web server
218350 8/14/2012 Aria Healthcare 9
218360 8/14/2012 Big Vanilla Health Club part 2 21 21 Name, address, DOB, SSN,  Email sent in error
218382 8/17/2012 GoDaddy.com part 2 1 nae, customer number and PIN of account holder hacker acquired list of login information
218353 8/20/2012 State Farm Insurance 7 names, address, DOB, credit card numbers, SSN 
218201 8/21/2012 Experian 1 1 name, address, SSN, DOB, account numbers
218289 8/22/2012 T-Mobile USA, Inc. 1 credit card information employee used credit card to make payment to personal account
218198 8/23/2012 CareFirst BlueCross BlueShield 1 1 SSN, DOB, address
218199 8/23/2012 Mutual of Omaha 3 Application information, including SSN. Employee's home broken into and laptop was stolen
218062 8/24/2012 Bill & Melinda Gates Foundation 19 name, address, phone number, SSN and info about payment history A the wrong version of a spreadsheet to an email that was sent to a very small number of foundation vendors. The spreadsheet contained info about vendors or the foundation.
218197 8/24/2012 Saint Agnes Hospital  40
218195 8/30/2012 Lincoln Financial Securities Corporation 4 4657 Names, addresses, SSN, government issued ID numbers, and financial account info. unauthorized access to a virtual server used by Red Boat Advisor Resources
218387 9/4/2012 Diversified Retirement Corporationon 27 name, address, ssn, account number, account balance, salary, and salary deferral amount Employee was terminated- took information to solicit business.
218388 9/4/2012 Database Designs, Inc. 13
218391 9/4/2012 Yale University 1 name, ssn hacking
218392 9/4/2012 Tiffany & Co. 36 SSN, names, addresses, tax ID numbers and banking info  unauthorized access to computer servers
218369 9/5/2012 University of Baltimore name, ssn, address,  spreadsheet sent to law school alumn. by accident
218370 9/5/2012 Churchill Downs, Inc. customer names, email addresses, DOB, and encrypted SSN unauthorized access into database
218842 9/6/2012 Wounded Warrior Project 22 Name, address, SSN, DOB, credit card info, bank numbers, life insurance info Several laptops stolen after office was burglarized
218844 9/6/2012 Air France 1 customer name, billing address, credit card information a (now former) employee accessed call center information
219251 9/6/2012 Nationwide Insurance 2 286 Name, SSN former employee using information
218846 9/7/2012 Liberty Mutual Insurance 5 Name, address, DOB, SSN Audio recorder used by claims rep to interview claimants was stolen
218847 9/10/2012 Ameriprise Financial, Inc. 3 name, DOB, last four SSN, address incorrect setting in software allowed users who logged in to see other users' info.
218840 9/13/2012 Experian 2 name, address, SSN, DOB (information typically associated with a consumer report) personal info may have been breached without proper authorization by SEI-US Employees FCU.
218838 9/17/2012 50Can, Inc. 3 names and SSN of employees Stolen laptop
218867 9/17/2012 American General Life Companiess 2 Name,address, DOB, SSN Internal system viewable via internet - likely due to employee working remotely
218871 9/17/2012 FujiFilm 4 name, ssn unauthorized access to employee email account
219039 9/18/2012 Transcend Capital 24 Name, SSN, email address, security positions, account number, address computer hacker
218930 9/19/2012 FEI Company name and SSN, other information associated with employment stolen laptop
219254 9/21/2012 Western Union 20 names, address,  email, phone numbner, gold card number unauthorized access to western union gold card loyalty accounts
219663 9/24/2012 Informative Research 1 1 credit file compromised
219248 9/25/2012 Magellan Midstream Partners, L.P. the first and last names, social security numbers, date of birth, and home addresses for employees, former employees and dependents, benefit enrollment election and limited salary information for employees the File Transfer Protocol (FTP) application
219246 9/27/2012 Allied Technologies and Consulting, LLC
219552 9/30/2012 Manor Tax Services, LLC 60 name, address, birth date, social security numbers, financial account numbers and financial data which would be reported on an income tax return. stolen computer

 

 
 

Attorney General of Maryland 1 (888) 743-0023 toll-free / TDD: (410) 576-6372
Home | Site Map | Privacy Policy | Contact Us