BreachExchange mailing list archives

Re: CA: Kaiser warns nearly 30, 000 employees of data breach


From: Henry Brown <hbrown () knology net>
Date: Mon, 02 Mar 2009 07:52:53 -0600

a follow-up with more information
http://www.mercurynews.com/breakingnews/ci_11804740

[...]

A security breach involving personal data for 29,500 Kaiser Permanente 
workers in Northern California reportedly occurred in the offices of an 
employee union.

Law enforcement detectives have determined the information was taken 
from the offices of United Healthcare Workers-West in July 2007, Kaiser 
said in a written statement.

The stolen data included names, addresses, dates of birth and Social 
Security numbers for Kaiser employees.

"Kaiser Permanente provided the information to the union in connection 
with remittance of dues payments, a legitimate activity that Kaiser 
Permanente employees voluntarily authorized," Kaiser said.

[...]

The theft came to light after the arrest of San Ramon resident Mia 
Garza, 28, on Dec. 23 on suspicion of possession of stolen property and 
forgery. In a confiscated computer, San Ramon police later found a file 
with the Kaiser employee data.

Garza was not a Kaiser employee and it is not clear how she obtained the 
information. No Kaiser-member health data has been compromised.

[...]

-------- Original Message --------
Subject: [Dataloss] CA: Kaiser warns nearly 30, 000 employees of data breach
From: lyger <lyger () attrition org>
To: dataloss () datalossdb org
Date: 2/6/2009 4:15 PM
http://www.mercurynews.com/breakingnews/ci_11646163?nclick_check=1

Kaiser Permanente is notifying nearly 30,000 Northern California employees 
that a security breach may have led to the release of their personal 
information.

Some employees have reported identity thefts resulting from the breach, 
Kaiser reported.

A law enforcement agency seized a computer file with Kaiser data from a 
person who was subsequently arrested. The suspect was not a Kaiser 
  


_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

CREDANT Technologies, a leader in data security, offers advanced data encryption solutions.
Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently 
across your enterprise to ensure regulatory compliance.
http://www.credant.com/stopdataloss


Current thread: