Skip to content

Breaches disclosed in 2009

38 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Eastern Washington UniversityNetwork breach exposes SSNs of up to 130,000 students since 1987Dec 31, 200916 years agoHackingUnverified130K
Detroit Department of Health and Wellness PromotionDec 15, 200916 years agoLost or stolen device10K
University of California, San FranciscoDec 15, 200916 years agoLost or stolen device7,300
RockYouSQL injection exposes 32 million plaintext passwords at RockYouDec 14, 200916 years agoHacking32M
Rick Lawson, Professional Computer ServicesDec 11, 200916 years agoLost or stolen device2,000
Kern Medical CenterDec 10, 200916 years agoLost or stolen device596
Democracy Data & Communications, LLC (Dec 8, 200916 years ago83K
Cogent HealthcareNov 25, 200916 years agoLost or stolen device6,400
Children's Hospital of PhiladelphiaNov 24, 200916 years agoLost or stolen device943
City of Hope National Medical CenterNov 23, 200916 years agoLost or stolen device5,900
Michele Del Vicario, MDNov 20, 200916 years agoLost or stolen device6,145
L. Douglas Carlson, M.DNov 20, 200916 years agoLost or stolen device5,257
Mark D. Lurie, MDNov 20, 200916 years agoLost or stolen device5,166
Joseph F. Lopez, MDNov 20, 200916 years agoLost or stolen device952
David I. Cohen, MDNov 20, 200916 years agoLost or stolen device857
Health NetMissing portable drive held records of 1.5 million Health Net membersNov 18, 200916 years agoLost or stolen deviceUnverified1.5M
Health Services for Children with Special NeedsNov 17, 200916 years agoLost or stolen device3,800
Alaska Department of Health and Social ServicesOct 30, 200916 years agoLost or stolen device501
Mid America Kidney Stone AssociationOct 28, 200916 years agoLost or stolen device1,000
Brooke Army Medical CenterOct 21, 200916 years agoLost or stolen device1,000
Virginia Department of EducationMisplaced flash drive held data of 103,000 adult education studentsOct 15, 200916 years agoLost or stolen deviceUnverified103K
BlueCross BlueShield AssociationStolen employee laptop held data on 850,000 doctorsOct 6, 200916 years agoLost or stolen deviceUnverified850K
US National Archives and Records AdministrationFailed hard drive with 76 million veterans' records returned to vendorOct 2, 200916 years agoVendor breachUnverified76M
University of North Carolina at Chapel HillHacker breaches mammography study server with data of 236,000 womenSep 25, 200917 years agoHackingUnverified236K
National Guard BureauContractor laptop stolen with data of 131,000 National Guard soldiersAug 13, 200917 years agoVendor breachUnverified131K
Network SolutionsRogue code on hosted e-commerce servers compromises 573,000 card accountsJul 24, 200917 years agoHackingUnverified573K
AetnaWeb site breach may have exposed SSNs of 65,000 Aetna employeesMay 28, 200917 years agoHackingUnverified65K
University of California, BerkeleyHackers breach Berkeley health services databases of 160,000 studentsMay 7, 200917 years agoHackingUnverified160K
Fulton County Board of Registration and ElectionsVoter cards with SSNs of 99,000 Atlanta-area voters found in trash binMay 5, 200917 years agoExposed dataUnverified99K
Virginia Department of Health ProfessionsHackers demand $10 million ransom for Virginia prescription databaseMay 4, 200917 years agoExtortionUnverified530K
Oklahoma Housing Finance AgencyStolen laptop held SSNs of 225,000 Section 8 housing clientsApr 29, 200917 years agoLost or stolen deviceUnverified225K
Idaho National LaboratoryDisc with data of 59,000 Idaho National Laboratory workers lost in UPS transitMar 7, 200917 years agoLost or stolen deviceUnverified59K
New York City Police Pension FundPension fund employee accused of stealing tapes with data of 80,000 officersMar 4, 200917 years agoInsiderUnverified80K
Arkansas Department of Information SystemsMissing vault tape held background check data of 807,000 peopleFeb 20, 200917 years agoLost or stolen deviceUnverified807K
University of FloridaForeign hacker accesses UF Grove system data on 97,200 peopleFeb 19, 200917 years agoHackingUnverified97K
phpBBAttacker takes phpBB.com user database of 400,000 via unpatched PHPlist bugFeb 5, 200917 years agoHackingUnverified400K
Heartland Payment SystemsMalware in card processor network steals card data at huge scaleJan 20, 200917 years agoHackingUnknown
CheckFreeHijacked CheckFree domains redirect bill payment users to malware siteJan 6, 200917 years agoHackingUnverified5M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.