Wisconsin Department of Agriculture, Trade and Consumer Protection

serving the state of wisconsin since 1839

DATCP works to assure safe food, healthy people, animals, plants and environment, vibrant agriculture and fair business practices.

  You are here:   

Office of Privacy Protection

Data Breaches Affecting Wisconsin Citizens

May 2013

Date Public Notified Date of Breach Company Data Accessed
May 14, 2013

April 26, 2013 TerraCom, Inc. (“TerraCom”) Name, Social Security Number, Date of Birth, Address, Driver’s License Number, copies of tax information and other government forms that TerraCom is required by law to obtain and use in order to determine applicant eligibility for the Lifeline program.
Who’s Affected Details

The data accessed belonged to 150,000 applicants seeking enrollment in the federal Lifeline telephone program administered by the Federal Communications Commission (FCC). Approximately 875 of the 150,000 are Wisconsin residents.

On April 26, 2013, TerraCom learned of a security breach involving unauthorized access to personal data and downloaded files related to over 150,000 individuals. The data was stored on the computer servers of TerraCom’s IT contractor, Call Centers India, Inc. d/b/a VCare Corporation (“VCare”) and belonged to applicants seeking enrollment in the federal Lifeline telephone program administered by the Federal Communications Commission (FCC). Approximately 875 of the 150,000 are Wisconsin residents

TerraCom has initiated immediate corrective action to secure and protect compromised data files and further safeguard the personal data of applicants from future attacks by hackers.

TerraCom has mailed notice of the security breach to those persons whose records were individually accessed. Additionally, TerraCom will provide these applicants whose personal information was put at risk with instructions and the opportunity to enroll in a credit bureau monitoring service at no cost to the applicant.

A toll free number has been provided to assist applicants whose personal information was accessed about what they should do. (1-855-297-0243)

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.


April 2013

Date Public Notified Date of Breach Company Data Accessed
April 9, 2013

March 13, 2013 Kirkwood Community College (ADPI) Names, birthdates, race, contact information and social security numbers
Who’s Affected Details
Individuals who applied for college-credit classes between February 25, 2005 and March 13, 2013.

Hackers using an international IP address unlawfully accessed the Kirkwood website on March 13, 2013.

Specifically, the hackers gained access to archived application information for approximately 125,000 individuals who applied for college-credit courses from February 2005 through March 13, 2013. This may have included applicant names, birthdates, race, contact information and social security numbers.

Those who have been affected by the breach will be notified in writing by Kirkwood administrators.

For those who haven’t received a letter, but believe they applied to take Kirkwood college-credit classes between the specified times can contact verify@kirkwood.edu.

This breach affects all Kirkwood locations.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.


February, 2013

 

Date Public Notified Date of Breach Company Data Accessed
February 13, 2013

December 14, 2012 Froedtert Health A computer virus may have allowed an unauthorized person to access an employee of Froedtert Health’s work computer account that contained personally identifiable information (PII) of approximately 43,000 patients.
Who’s Affected Details
Although there was no evidence found that any unauthorized person accessed any personal information or medical records, the expert computer forensics company couldn’t definitively rule out the possibility that the virus was able to obtain information stored in this employee’s work computer account, so they felt it was important to make the public aware of this incident. The file in the employee’s work computer account contained patient information including names, addresses, telephone numbers, dates of birth, medical record numbers, names and health insurers, diagnosis, other clinical information, and in some instances, Social Security Numbers. Financial information was not stored in any files in the employee’s work computer.

A public notice is available on their website (listed directly below) along with letters that were sent out to those affected--and to clarify, there are three different notices:

  • 1)Froedtert Medical’s website: General Public notice: http://www.froedterthealth.org/computer-security-incident Patients with questions regarding this breach can contact Froedtert Health; a call-center has been set up to handle these specific calls: 1-855-770-0006; when prompted, customers need to enter 10-digit reference code: 5764020813.
  • 2)Notice to patients whose SSN was on the employee’s computer along with the other PII – Credit Monitoring is being offered for one-year with TransUnion Patients who receive this letter will need to contact TransUnion directly at 1-800-242-5181; when prompted, customers need to say or enter the telephone pass code: 623817.
  • 3)Notice to patients whose PII was on the employee’s computer, but not their SSN – No Credit Monitoring Offered. Patients who receive this letter can contact the call-center at 1-855-770-0006; when prompted, enter the following 10-digit code: 5763020813.

 

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.


Date Public Notified Date of Breach Company Data Accessed
February 2, 2013

Summer 2012 River Falls Medical Clinic Patient’s personal information: first and last name, certain account/billing information such as diagnosis codes, scheduling information, insurance information, account numbers, medical chart numbers and some documents taken contained patient social security numbers, home addresses and phone numbers.
Who’s Affected Details
River Falls Medical Clinic says about 2,400 of their clients have been affected and each one has been notified. The letter is from River Falls Medical Clinic and AllClearID.

River Falls Medical Clinic has notified about 2,400 clients of a breach of unsecured personal information.

The breach occurred after clinic officials reported stolen equipment to the River Falls Police in the summer of 2012.

Police investigated and found the stolen equipment, as well as paper documents containing patient-identifying information in the suspect’s home on Nov. 28.

An employee of a cleaning service is the main suspect. The items were found in the employee's home and he was charged with felonies associated with theft and drug possession.

All these records were returned to the clinic.

According to clinic administrator Jon Pedersen, clinic officials have concluded that the overall risk of harm to patients is low. Out of caution, affected patients were still contacted by letter.

The clinic is offering help from AllClearID at no cost. Individuals who have further questions or concerns can call 877-676-0371.

 

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.


Date Public Notified Date of Breach Company Data Accessed
February 1, 2013

February 1, 2013 Twitter, Inc. Usernames, email addresses, and encrypted passwords.
Who’s Affected Details
Approximately 250,000 Twitter users.

On Friday, February 01, 2013, Twitter, Inc. announced that it was a target of an attack. The company says 250,000 users may have been affected.

The company reports it detected unusual access patterns earlier during the week and found that user information—usernames, email addresses and encrypted passwords for about 250,000 users may have been accessed.

Twitter’s director of information security wrote that they discovered one live attack and were able to shut it down while in process; however, their investigation has thus far indicated that the attackers may have had access to this limited user information.

Jim Prosser, spokesman for Twitter, the social network known for its 140-character messages, could not speculate on the origin of the attacks as its investigation was ongoing.

Prosser also stated that Twitter was working with government and federal law enforcement to track down the source of attacks. For now, he said the company had reset passwords for, and notified every compromised user.

For more information about making your Twitter account more secure, go to: https://support.twitter.com/articles/76036-keeping-your-account-secure# .

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

January, 2013

Date Public Notified Date of Breach Company Data Accessed
December 21, 2012

November 29, 2012 Skagit Valley Casino Resort Stolen data may have included name, driver’s license number, social security number and bank account information.
Who’s Affected Details
Individual’s whose information may have been exposed included customers of the Skagit Valley Casino Resort, and/or customers who have been to a casino in Las Vegas or a casino that uses Bally’s as a vendor. Bally Technologies, Inc. (“Bally”) is a slot manufacturing company, their primary technologies include gaming devices for land-based, riverboat and Native American casinos, video lottery and central determination markets.

On November 29, 2012 the Skagit Valley Casino Resort learned that an incident involving one of its vendors, Bally Technologies, Inc., (“Bally”) may have involved customer’s personal data. Electronic equipment in Bally’s possession in the normal course of business for the purposes of performing services for Skagit Valley Casino Resort was stolen from a Bally employee’s home office and may have contained data of customers.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

December, 2012

Date Public Notified Date of Breach Company Data Accessed
November 29, 2012

June 15, 2012 to October 1, 2012 Advanced Data Processing, Inc. (ADPI) Name, Date of Birth and Social Security Number
Who’s Affected Details
Individuals whose information may have been exposed included patients who received services from certain ambulance agencies associated with Advanced Data Processing, Inc.

On October 1, 2012. ADPI learned that one of their employees stole information associated with Grady EMS ambulance service and disclosed certain patient account information in connection with a scheme to file false federal tax returns. The accessed account information included names, dates of birth, Social Security numbers and record identifiers.About 900 Grady EMS patients had their information exposed between June 15, 2012 and October 12, 2012.

The company sent letters by first class mail, dated November 29, 2012, to affected individuals and has posted a notice on its website with links to information regarding the incident and resources to aid affected individuals.

The employee has been apprehended by authorities and was immediately terminated by the company and no longer has access to the company’s system.

To help detect possible misuse of the patients’ personal information, the company offered a complimentary one year membership of Experian’s ProtectMyID Alert.Individuals have 90 days to activate this membership, which will then continue for 1 year.An activation code was provided on the letter they received.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

November, 2012

Date Public Notified Date of Breach Company Data Accessed
November 26, 2012

October 11, 2012 Pinnacle Foods Group, LLC Names, Social Security Numbers, driver’s license numbers, credit card numbers, and/or personal information.
Who’s Affected Details
Individual whose information may have been exposed includes employees, former employees, and employees who applied for employment at Pinnacle’s Darien, Wisconsin location.

Pinnacle Foods learned that an employee’s laptop was stolen from her home in Clinton, WI on October 11, 2012.Company operations and systems weren’t involved; the breach affected only information residing on the stolen laptop, which was password protected Personal information of up to 1,818 individuals in up to 13 states, including Mexico may have been affected by a theft of the company’s laptop from an employee’s home. The company isn’t offering any free credit monitoring or identity theft services; however, in the following press release they have a list of steps the affected individuals should follow to protect themselves against identity theft. Pinnacle Foods Group, LLC issues a press release that can be obtained directly from their website: http://www.pinnaclefoods.com/Media+Relations/Press+Releases If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.


Date Public Notified Date of Breach Company Data Accessed
November 16, 2012

October 3, 2012 Nationwide Insurance Company Individual’s Name and a combination of: Social Security number, driver’s license number and/or date of birth and possibly marital status, gender and occupation, and the name and address of their employer.
Who’s Affected Details
Nationwide’s records indicate that the information of some customers and other individuals who received a quote on auto insurance from Nationwide or Allied, either online, via phone or through an agent at some point during the thirteen months prior to the attack on October 3, 2012.

Nationwide Insurance Company confirmed that on October 3, 2012, a portion of their computer network that is used by Nationwide Insurance and Allied Insurance was attacked.

On November 2, 2012, Nationwide received confirmation of the identities and addresses of the individuals whose personal information was compromised.

Nationwide began sending letters to those affected on November 16, 2012, and is offering free credit monitoring and identity theft protection product for one year as a precaution. Individuals who enroll in this service, offered through Equifax, will be notified of changes to their credit information and will receive $1-million in identity theft insurance with a $0 deductible.

Nationwide will remain committed to enhancing its defenses against these kinds of attacks. They promptly reported this criminal attack to law enforcement, including the FBI, who are still investigating the incident.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

October, 2012

Date Public Notified Date of Breach Company Data Accessed
October 24, 2012

September 23, 2012 Alere Home Monitoring Name, Address, Date of Birth, Social Security Number, Diagnosis
Who’s Affected Details
More than 100,000; among those affected include 1,736 Wisconsin residents.

A car belonging to an Alere Home Monitoring employee was burglarized on September 23, 2012, and one of the items stolen from the car was the employee’s laptop.

Although the laptop was password protected, it did contain a file with personal information that included name, address, date of birth, Social Security Number and diagnosis; all of which was not encrypted.

Alere Home Monitoring has arranged for customers to receive identity protection from Experian Security Assistance at no cost for one full year from the date the customer registers.

The customer must register in order to receive this complimentary identity protection service.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

July, 2012

Date Public Notified Date of Breach Company Data Accessed
July 24, 2012

April 2012 – July 2012 Department of Revenue (DOR) Social Security Numbers
Who’s Affected Details
The first seller listed on the real estate property return. The Department of Revenue (DOR) has had a data breach. The 2011 historical property sales report that was posted online contained a second imbedded file; and the imbedded file contained social security numbers for the first seller listed on the real estate property return. This information was not visible; the user would have needed to open this specific file to find the confidential information.

During the April-July timeframe, the Access report was downloaded 138 times. Although DOR believes that the individuals who downloaded the file are using it for their own business purposes, and have no malicious intent, they will be offering free credit monitoring for a year for individuals who may have been affected by this situation.

The agency removed the report immediately after they were notified by a user that they found this buried report online. DOR has contacted appraiser and real estate associations to ask them to notify their members that anyone who used it should destroy it and a new clean report without any information has been reposted online.

The agency will be mailing letters to the sellers that may have been impacted, these letters will be mailed to the last known address of the seller. If the seller does not receive a letter, he or she can contact the department to confirm whether or not their social security number was included on their real estate form:

Toll-free number: 888-947-3453
Email: realestate@wisconsin.gov

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

Date Public Notified Date of Breach Company Data Accessed
July 12, 2012

July 11, 2012 Yahoo! Voices Email address and passwords
Who’s Affected Details
This affects those who use: Yahoo!, Gmail, MSN, Hotmail, Comcast and AOL (because Yahoo! Voices allows you to sign in using different email addresses) Yahoo confirmed on Thursday, July 12, 2012 that its user generated contributor network Yahoo! Voices, suffered a massive Data Breach.

On Wednesday, July 11, 2012, hackers stole a file from the servers of Yahoo! Voices that contained over 400,000 user email addresses and passwords, and then posted them in plain text online.

This doesn’t just affect Yahoo! email addresses, this also affects: Gmail, MSN, Hotmail, Comcast and AOL users as well because Yahoo! Voices allows you to sign in with non-Yahoo! email addresses.

Yahoo has taken action and is now working on fixing the vulnerability that led to the breach. Yahoo! has changed the passwords of the affected accounts and has notified the companies whose user accounts may have been compromised.

 

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

June, 2012

Date Public Notified Date of Breach Company Data Accessed
June 6, 2012

June 6, 2012 LinkedIn Access to approximately 6.5 million customer passwords
Who’s Affected Details
About 6.5 million LinkedIn users were affected. The company notified members that have accounts associated with compromised passwords to notify them their account password is no longer valid; this notification included instructions on how to change their passwords. On June 6, 2012, LinkedIn confirmed a security breach that resulted in the loss of encrypted passwords and could allow hackers to break into subscribers’ accounts.

The company reported that only passwords were stolen; not corresponding email addresses and that they weren’t concerned about the hackers being able to access account or financial information.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

April, 2012

Date Public Notified Date of Breach Company Data Accessed
April 21, 2012

April 12, 2012 Under Armour Inc. Employee names, Social security numbers, Salary information
Who’s Affected Details
Unspecified number of employees.

Under Armour Inc. employs 5,400 employees around the world.
An unencrypted thumb drive containing payroll information was lost in the U.S. mail by Under Armour Inc’s auditing firm, PricewaterhouseCoopers.

PricewaterhouseCoopers is offering free credit monitoring service and identity theft insurance to data theft victims for 12 months.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

Date Public Notified Date of Breach Company Data Accessed
July 2, 2010

Wisconsin residents made aware in April 2012
January 30, 2009 through November 3, 2011 Camille’s Sidewalk Café, franchise of Beautiful Brands International Debit card and credit card numbers
Who’s Affected Details
For Wisconsin residents, affects former customers of Camille’s Sidewalk Café. In July of 2010, it was discovered that the parent company of Camille’s Sidewalk Café, Beautiful Brands International, was hacked. The hackers infiltrated the credit card processing system. The breach affected about 20 stores, including the Camille’s in Wausau.

Beautiful Brands International worked with the Secret Service, Visa and MasterCard to stop the breach and prosecute the persons responsible. However, there was a delay in notifying Wisconsin residents because the owners of Camille’s Sidewalk Café in Wausau were in the process of changing credit card processors and leaving the Camille’s franchise.

Recently, fraudulent charges have appeared on compromised credit cards. Local authorities are investigating.

If you were a patron of Camille’s at any time, it is recommended you contact your bank or credit card company and request a new debit or credit card number be issued to you.

If you feel you are a victim of identity theft as a result of this breach, contact the Office of Privacy Protection at (800) 422-7128 or email us at DATCPWisconsinPrivacy@Wisconsin.gov.

Archives

2011