Home | Protecting Consumers | Safeguarding Children | Seniors | Law Enforcement | Site Map | Search
 

Maryland Information Security Breach Notices - 2013

As of January 2008, any business that retains consumer records is required by Maryland law to notify a consumer who is a resident of Maryland if his or her information is compromised. The "security breach law" also requires the business to notify the Office of the Attorney General. This webpage contains links to all notices sent to the OAG since the law took effect. Below is a chart containing the case number, date of the notice, business name, how many people are affected what information was compromised and how it was lost. For more information on the security breach law, click here.

Breach Notices from: 2014 | 2013 | 2012 | 2011 | 2010 | 2009 | 2008
Case Number Date Received Business Name No. of MD residents Total breach size Information breached How breach occurred

235486

1/2/2014

Erie Insurance

1

 

name, ssn, dob

inadvertant email

235488

1/2/2014

T-Mobile

280

 

name, address, ssn, driver's license number

unauthorized access to servers

235972

1/17/2014

easton-bell sports, inc.

79

 

name, address, phone number, email and credit card info

hackers accessed servers

235975

1/22/2014

Sidney Regional Medical Center

1

 

name, address, ssn, DLN

information accessible via internet searches

235976

1/22/2014

MilCo Enterprises, Inc. DBA EasyDraft

Part 2

492

 

name, bank routing number, bank account number

internal website was publicly available

235979

1/17/2014

Mercy Medical Center

1

 

Protected health information

unauthorized disclosure

235980

1/14/2014

Apex Systems, Inc.

1

 

name, ssn, and salary info

spreadsheet mistakenly emailed

235983

1/14/2014

Update Legal

1

 

name, ssn, dob, passport card number, signature, and address

improper access to records

235984

1/10/2014

Edgepark Medical Supplies

101

 

login info, name, dob, phone number, shipping and billing info, email, credit card info, primary physician, diagnosis, and health insurer

hackers

235987

1/6/2014

U.S. Fund for UNICEF

38

 

name, credit card info, bank account number, phone number, email

hackers

235997

1/15/2014

Genworth

6

 

name, ssn

theft during payment processing

235998

1/7/2014

Experian

4

 

name, dob, account numbers

improper access

236001

1/22/2014

Focus on Surety LLC DBA Suretegrity

Part 2

 

name, address, ssn

improper access by former employee

236059

1/23/2014

Neiman Marcus Group stores

 

name and payment card data

Criminal cyber-security instrusion

236060

1/23/2014

Barry University

16

 

name, dob, ssn, DLN, bank account number

malware

237698 1/21/2014 Complete Medical Homecare 16 patient names, addresses, ssn, dob, and certain medical diagnoses info transmitted electronically to business partner
237700 1/23/2014 DaVita Healthcare Partners 1 name, ssn, clinical diagnoses, health insurance info, dialysis info medical record potentially misplaced
237703 1/24/2014 The Coca Cola Company 1754 name, ssn, dln, government identification numbers theft of several laptops
237701 1/25/2014 Michaels Stores, Inc. payment information hackers
236620 1/30/2014

Tribeca Film Institute

Part 2

1 payroll info unauthorized access to payroll info
237704 1/30/2014 intuit 1 tubrotax id, email address, mobile number, security question, billing information single IP address attempting to access multiple accounts
237706 1/30/2014 Nielsen name, ssn HR employee accidentally emailed file containing info to others within the company
236610 1/31/2014 Beebe Healthcare 15 names, dob, ssn, health info unauthorized access by employee (employee was later terminated)
237708 2/3/2014 Greenleaf Book Group, LLC 6 name, credit card info, email address, mailing address stolen laptops
236609 2/4/2014 Freeman 585 W2 information glitch in a vendor's mail technology caused wrong address to be placed on envelopes
237645 2/6/2014

White Lodging Services Corporation

Part 2

names, credit and debit card information hackers
237715 2/6/2014 Bank of the West 10 name, ssn unauthorized access (hackers)
237648 2/7/2014

The Home Depot

Update

1 name, contact info, financial info, DLN, SSN three former HR employees improperly accessed information
237649 2/7/2014

Catamaran

Part 2

37 SSN, name, address computer code error
237712 2/7/2014 Farmers and Merchants Trust Company of Chambersburg 6 name, address, phone number, account number, account value, dob, and investment products former employee obtained unauthorized access
237716 2/11/2014 TD Bank 8 names and bank accounts inadvertent email
237718 2/11/2014 Embassy suites 12 payment card info unauthorized third party used illegal manual devise to obtain credit card info
237719 2/11/2014 Fresenius Medical Care 8 ssn, insurance account number, phone number, address, insurance payment info, info on patient's ability to pay missing USB drive
2/13/2014 Zevin Asset Management, LLC
237656 2/13/2014

Carmike Cinemas, Inc.

Part 2

1 name, address, ssn w-4 cards stolen from warehouse
237657 2/14/2014

Rubin Lublin, LLC

Part 2

tax info, name, ssn tax forms mailed to wrong place
237721 2/14/2014 Experian 5 personal information unauthorized access
237734 2/18/2014 John Hancock Life & Health Insurance Company name, address, ssn, member id number, dob, policy number, information inadvertently shared
237743 2/19/2014 University of Maryland 309079 name, ssn, DON, university ID numbers hackers
237722 2/20/2014 Aflac 12 personal information temporary employee improperly accessed info
237659 2/21/2014

Assisted Living Concepts, LLC

Part 2

names, address, DOB, ssn hackers breached payroll files
237678 2/24/2014 Alaska Communications Systems Holdings, Inc. 4 name, address, dob, ssn computer virus
237731 2/24/2014 Merrill Lynch Wealth management 1 name, address, ssn, account number info was viewable online
237736 2/24/2014 DST Systems, Inc. home address, ssn letter mailed to wrong address
237730 2/25/2014 eScreen, Inc. 5 name, ssn employment screening employee improperly collected info
237681 2/26/2014 Variable Annuity Life Insurance Company 25855 774723 name, ssn improper access by former employee
237723 2/26/2014 Mkenna Long & Aldridge 441 name, address, wages, tax and ssn information, DOB, age, gender, ethnicity, visa and passport info unauthorized access to computer servers
237683 2/27/2014 Oak Assosiates Funds 12 names, address, email address, phone number, ssn, certain financial info theft of an electronic device
237725 2/27/2014 ProAssurance Mid-Continent Underwriters, Inc. 1 23 name, ssn
237726 2/27/2014 J.M. Smucker Company name, addrses, email addrses, phone, credit/debit card info malware
237686 2/28/2014 Sands name, emails address, ssn, job titles hackers
237729 2/28/2014 Digia USA, Inc. name, address, dob ssn, health insurance, beneficiary data, DLN, banking data stolen laptop
238858
4/2/2014
City of Crossville, Tennessee
7
name, bank numbers, internal website was publicly available
238935
4/2/2014
American Health Information Management Association (AHIMA)
4
credit card info former employee improperly accesssed info
238936
4/7/2014
Deltek GovWin IQ
name, billing address, phone number, email address, credit card info, and username hackers
239338
4/18/2014
Willis North America Inc. Medical Expense Benefit Plan
129
name, dob, ssn, employee ID number inadvertent email sent to employees
239339
4/15/2014
Mimeo.com
2
name, DOB, SSN, address improper access by employee
239341
4/14/2014

Mid Atlantic Professionals, Inc. DBA SSI

Part 2

521
Social Security Numbers, Date of Birth, Mailing Addresses contents of our company drive inadvertently exposed to the internet
239342
4/11/2014
Veterans of Foreign Wars of the U.S. (VFW)
1074
name, address, SSN hackers
239343
4/11/2014
Blue Cross and Blue Shield of Kansas City, Inc.
name, credit card info, bank account info improper use of information by employee
239344
4/11/2014
Society for Science & the Public
239345
4/11/2014
LaCie USA
239497
4/3/2014
Logos Management Software, LLC
15
credit card info server accessed by unauthorized intruder
239514
4/17/2014
Michaels Stores, Inc.
3000000
payment card information, such as credit card number and expiration date malware
239514
4/17/2014
Aaron Brothers
3000000
payment card information, such as credit card number and expiration date malware
239515
4/15/2014
USAA
1
name, address, ssn, member account number, and financial info mortgage loan documents erroneously mailed to an unrelated individual
239516
4/2/2014
Citibank, N.A.
239788
4/25/2014
Central City Concern
10
15
name, dob, ssn, health info employee accused of improperly coping information with intent to process fraudulent tax returns
239789
4/24/2014
Westlife Distribution USA, LLC
1
4
name, payment card info web server hacked
239792
4/21/2014
The American Tin Ceiling Co.
29
name, payment info, malicious computer code
239793
4/24/2014
JCM Partners, LLC
18
name, ssn, DLN, email and mailing address unauthorized access to database
239795
4/22/2014

Johns Hopkins University (Identity Theft)

Part 2

725
name, ssn files inadvertently made accessible on the internet
239796
4/21/2014
L Brands, Inc.
name, payment card info concealed skimming device
239972
4/22/2014
Snelling Staffing, LLC
19
9757
ssn, dln, dob, address, medical info, alleged criminal activity, drug test results personal information inadvertently made available on the internet due to errors made during the installation of a cloud based server
239974
4/22/2014
Seattle University
239975
4/25/2014
Federal Home Loan Mortgage Corporation (Freddie Mac)
239976
4/25/2014
NCO Financial Systems, Inc.
46
name, address, ssn, account number PDF attachment accidentally included in email
239977
4/29/2014
Seterus
2
foreclosure correspondence sent to incorrect address
239979
4/30/2014
Boomerang Tags
593
name, address, payment card info malicious software
239980
4/1/2014
Susquehanna Health
2
name, address, ssn, dob, health insurance info, payment info, health info info included on unencrypted email
239981
4/14/2014
CareFirst BlueCross BlueShield
2
name, ssn, banking info info inadvertently mailed
239982
4/7/2014
FujiFilm
1
name, ssn, dob, dln, bank account info, address, and credit card info email system accessed without authorization
239985
4/22/2014
Larsen Dental Care
3
name, address, dob, dental record, medical history, health infsurance identification number, ssn stolen hard drive
239970
5/5/2014
Maschino, Hudelson & Associates name, address, dob, ssn, health information laptop stolen from trunk of car
239971
5/5/2014
Gingerbread Shed Corporation
78
name, address, phone number, email address, credit card information unauthorized third party gained access to personal information
240063
5/7/2014
American Dental Association
2
18
name, address, dob, gender, email address, phone number error during website upgrade
240072
5/7/2014
Mercer HR Services, LLC
4
name, ssn, address, banking info, retirement plan info improper disclosure by employee
240091
5/7/2014
Entercom Portland, LLC
5
name, ssn, dob backup of data server stolen from car
240096
5/8/2014
PREIT
91
name, address, ssn, and DOB unauthorized user obtained access
240201
5/12/2014
Santander Bank, N. A.
1
name, address, ssn, dob, bank account numbers employee improperly accessed and retained info
240278
5/13/2014
Hubbard-Bert, Inc.
22
name, ssn, email address, dob spreadsheets containing Lake Erie College of Osteopathic Medicine inadvertently exposed to internet
240427
5/14/2014

Precision Planting LLC

Part 2
Part 3
Part4

14
name, address, tax id number, SSN, financial account info unauthorized access to systems by an outside party
240428
5/14/2014
AutoNation, Inc.
29
name, address, email address, credit card info hacking
240429
5/16/2014
Affinity Gaming
name, credit/debit card info, unauthorized intrusion
240470
5/16/2014
Lowe's Companies Inc.
323
name, address, DOB, SSN, DLN, sales IDs, and other drivign record info info backed up to unsecured computer that was accessible from the internet
240512
5/20/2014
Paytime Harrisburg, Inc. DBA Paytime, Inc.
8261
name, ssn, direct deposit bank info, DOB hire date, wage info, home and cell phone numbers, address hackers
240529
5/21/2014
Hanover Foods Corporation
677
name, ssn, dob, bank account info, wage info, address, phone number Hackers
240558
5/22/2014
Hilbert College
1
name, dob, ssn paperwork distributed at financial aid workshop inadvertently contained personal info
240611
5/23/2014
The Home Depot, Inc.
3
account holder name, address, phone number, date of birth, and the brand, primary account number and expiration date of the credit card used improper access by employee
240639
5/27/2014

Placemark Investments, Inc.

Part 2

11
name, address, date of birth, and social security numbers malware
240640
5/27/2014

Walgreen Co.

Part 2

name, dob, ssn (Medicare ID number) information stolen by employee
240643
5/22/2014
CenturyLink
1
name, contact info, ssn, dln, dob unauthorized access to server
240673
5/27/2014
Service Alternatives, Inc.
2
name, address, ssn, dln, tax documents, bank account and routing numbers, I-9 info unauthorized access to payroll systems
240674
5/27/2014
Power Equipment Direct, Inc.
12
information displayed during online check-out (payment) process malicious computer code
240675
5/22/2014
Experian
3
name, ssn, dob, account numbers info accessed without proper authorization
240676
5/22/2014
Ebay cyberattack
241983
6/30/14
Dennis East International, LLC
3
user ID, credit card info, customer email address, address hackers
241984
6/27/14
Legal Sea Foods, LLC
name, credit card info unauthorized person gained access to server
241985
6/27/14

Atlantic Automotive Corp. DBA MileOne, Inc.

Part 2

350
name, address, email address, credit card info hackers
241986
6/25/14
Butler University
1626
name, ssn, dln, bank account info unauthorized hacking between Nov. 2013 and May 2014
241987
6/23/14
Montana Department of Public Health and Human Service
5
name, address, dob, ssn, SPHHS services applied for, health info Hackers
241989
6/19/14
Metropolitan Companies, Inc.
17
name, address, phone number, email address, ssn, dob, financial account info, passport info unauthorized third party accessed computer systems and potentially removed documents
241990
6/18/14
Record Assist, LLC
331
names, address, credit card numbers, and in some cases, social security number hackers
241991
6/18/14
Bell Nursery USA, LLC
25
name, ssn, dln, dob stolen laptop
241992
6/17/14

Papa John's USA, Inc.

Part 2

371
name, address, phone number, dob, ssn, dln password protected desktop computer stolen during armed robbery
241993
6/17/14
Specialized Eye Care
28
name and payment information employee improperly accessed info
241994
6/16/14
David Stanley Dodge
1
name, address, dob, ssn vulnerability on computer network
241995
6/12/14
SafetyFirst
97
name, ssn, dln, medical examiner's certificate and certain medical info unauthorized access to server
241996
6/12/14
Fidelity National Financial, Inc.
40
name, ssn, bank account info, dln, credit/debit card info targetted phishing attack
241997
6/2/14
Kimpton
1
name, address, payment card info malware
242000
6/27/14
Invest Financial Corporation
1
name, ssn, dob, address physical file may have been copied
242001
6/23/14
Giant Eagle, Inc.
469
name, ssn error in internal HR portal
242002
6/30/14
Sterne Agee
name, address, account number, ssn stolen laptop
242003
6/27/14

Benjamin F. Edwards and Co.

1139
malware
242004
6/27/14
Baltimore School of Massage Therapy
683
name, ssn, phone number, address, student ID number document inadvertently attached to email
242005
6/27/14
Seterus
1
laon number, borrower name, property address, loan details inadvertently faxed to incorrect person
242006
6/2/14
Gordon Feinblatt LLC
197
name, ssn, bank account tin malicious link in email
242007
6/2/14
Rowan Companies, Inc.
2
unauthorized computer access
242008
6/20/14
Primerica
27
name, dob, address, ssn, dln stolen laptop
242009
6/16/14
Polyone Designed Structures and Solutions
name, contact info, tax info, ssn, bank info computer network vulnerability
242010
6/12/14
Ullico Inc.
396
name, ssn, dob, address stolen laptop
242011
6/10/14
Herbaria
name, credit/debit card info compromised website
242013
6/5/14
National Cedit Adjusters, LLC
57
name, address, debt balance, dob, ssn
242014
6/5/14
AT&T
3
name, ssn, dob call center employee improperly accessed customer accounts
242015
6/9/14
Intuit, Inc.
1
address, name, ssn FEINs,and bank account number unauthorized access to merchant accounts
241980
7/2/2014
Wayneburg University
5
284 name, address, phone number, ssn info saved to drive that was capable of being access through the internet
241982
7/1/2014
Thomson Reuters
36
name, credit card info online contractor used customer credit cards to make unauthorized online purchases
242016
7/1/2014
P.F. Chang's
name, debit/credit card info hackers
242088
7/8/2014
Citi
17
checks sent to wrong recepients
242089
7/8/2014
ABM Parking Services, Inc.
3
employee improperly accessed info
242391
7/16/2014
United Air Temp Conditioning & Heating, Inc.
Name, payment card info former employee took a customer's credit card information without consent
242392
7/15/2014
Freshology, Inc. name, address, payment card info Unauthorized code found during website update
242465
7/10/2014
Park Hill School District
1
name, ssn, state identification number, and health plan insurance number Former employee downloaded files from work computer onto hard drive without consent
242470
7/10/2014
AECOM Technology Corporation
1892
name, address, ssn, personal bank account info
242639
7/21/2014
Experian
23
unauthorized access name, address, dob, ssn, account numbers
242685
7/23/2014
Washington National Insurance Company
1
name, address, dob, age, phone number, ssn still under investigation
242694
7/1/2014

Maryland Department Of Health And Mental Hygiene

Part 2

name, ssn info mistakenly emailed to two unauthorized individuals
242697
7/17/2014
Bank of America
26
name, ssn inadvertently uploaded info to an FTP site
242699
7/9/2014
TotalBank
63
name, address, account number, account balance, personal identification number (SSN, DLN, passport number, alien registration number) unauthorized individual obtained access to computer network
241980
7/2/2014
Wayneburg University
5
284
name, address, phone number, ssn info saved to drive that was capable of being access through the internet
241982
7/1/2014
Thomson Reuters 
36
name, credit card info online contractor used customer credit cards to make unauthorized online purchases
242016
7/1/2014
P.F. Chang's
name, debit/credit card info hackers
242088
7/8/2014
Citi
17
checks sent to wrong recepients
242089
7/8/2014
ABM Parking Services, Inc.
3
employee improperly access info
242391
7/16/2014
United Air Temp Conditioning & Heating, Inc.
Name, payment card info former employee took a customer's credit card information without consent
242392
7/15/2014
Freshology, Inc.
name, address, payment card info Unauthorized code found during website update
242465
7/10/2014
Park Hill School District
1
name, ssn, state identification number, and health plan insurance number Former employee downloaded files from work computer onto hard drive without consent
242470
7/10/2014
AECOM Technology Corporation
1892
name, address, ssn, personal bank account info
242639
7/21/2014
Experian
23
unauthorized access name, address, dob, ssn, account numbers
242685
7/23/2014
Washington National Insurance Company
1
name, address, dob, age, phone number, ssn still under investigation
242694
7/1/2014

Maryland Department Of Health And Mental Hygiene

Part 2

name, ssn info mistakenly emailed to two unauthorized individuals
242697
7/17/2014
Bank of America
26
name, ssn inadvertently uploaded info to an FTP site
242699
7/9/2014
TotalBank
63
name, address, account number, account balance, personal identification number (SSN, DLN, passport number, alien registration number) unauthorized individual obtained access to computer network
242738
7/24/2014

OppenheimerFunds Services

Update

1
name, account number, ssn info erroneously provided to a third party administrator
242843
7/25/2014
NorthShore University Healthsystem
1
name, address, email address, dob, marital status, benefits info, ssn phishing
242883
7/28/2014
Seattle University
26
name, bank routing and checking account info incorrect permission settings on an internaml drive
242921
7/28/2014
Backcountry Gear
92
name, address, credit/debit info malware
242927
7/29/2014
SourceMedia, Inc.
name, encrypted password, email address, phone number, credit card info hackers
242929
7/29/2014
Omega Net, Inc.
credit card info hackers
243339
7/31/2014
Chicago Yacht Club
name, address, potentially bank/credit card info malware
243340
7/31/2014
USAA
16
name, address, ssn, checking and savings account number, loan balance, insurance policy info Technical programming error
243341
7/30/2014
Dreslyn
11
credit/debit card info hackers
243342
7/30/2014
The Houstonian Hotel, Club, and Spa
15
names and credit card info hackers
243343
7/30/2014
Lasko Group, Inc.
210
name, email address, phone number, credit card info phishing attack
243345
7/30/2014
Reading Partners
11
SSN, compensation info, and other employment info theft of a laptop
243350
7/29/2014

The Northern Trust Company

Part 2

Part 3

10172
name, address, ssn, benefits plan, payment information, banking info inadvertent disclosure
243338
8/1/2014
P. F. Chang's China Bistro
name, credit card info hackers
244324
8/1/2014
Signal Outdoor Advertising, LLC
33
credit card payment info info inadvertently emailed
243551
8/4/2014
Test Effects, LLC
243337
8/5/2014
Vibram USA, Inc.
109
name, credit card info malicious code
244326
8/6/2014
Polish Falcons of America
1
name, ssn, credit card info stolen computers
243355
8/7/2014
Crothall Services Group
27
name, dob, ssn info inadvertently sent via email
243357
8/7/2014
Anderson & Murison, Inc.
14
name, dob, dln,address
243353
8/8/2014
St. Francis College
15
name, address, phone number, email address, ssn lost hard drive
243549
8/8/2014
Diatherix Laboratories
1
Name, ssn, dob, insurance, test information hackers
243545
8/12/2014
Kleiner Perkins Caufield & Byers
name, contact info, ssn, banking info stolen laptops
243547
8/12/2014
Harry Barker
43
name, address, phone number, email address, credit card number hackers
244352
8/12/2014

Freedom Management Group, LLC

Part 2

155
name, address, credit card number, cvv, expiration date, and in some cases email address and account password (if the customer elected to create an account) hackers
243543
8/14/2014
Tokyo Electric Power Company, Inc.
7
name, ssn inadvertent email
244350
8/14/2014
AB Acquisition LLC
credit and debit card info unauthorized access to electronic credit and debit card info
244351
8/14/2014

SUPERVALU Inc.

Part 2

account numbers, and in some cases also the expiration date, other numerical information and/or the cardholder's name, from payment cards hackers
244349
8/20/2014
M&T Bank
1
name, address, phone number, dob, ssn email inadvertently sent
244347
8/21/2014
Geekface LLC
32
name, address, username, password, ssn hacker
244316
8/22/2014
The UPS Store, Inc.
1855
name, address, ssn, payment card info, email address malware
244348
8/22/2014
Liberty Tax
tax information
244315
8/27/2014
Imhoff and Associates, P.C.
name, ssn, dln, contact info hard drive stolen from vehicle

 

 

 

 
 

Attorney General of Maryland 1 (888) 743-0023 toll-free / TDD: (410) 576-6372
Home | Site Map | Privacy Policy | Contact Us