Welcome Guest. | Log In| Register | Membership Benefits
  • Email this page E-mail this page
  • |  Print Print this page
  • |   Bookmark and Share

The Hartford Loses Tapes With Data on 237,000 People

Backup tapes have been missing since September 27 and include data from customers, employees, and others

Nov 02, 2007 | 09:18 AM

By Kelly Jackson Higgins
DarkReading

The Hartford Financial Services Group has lost three backup tapes containing the personal information of some 237,000 customers, employees, and those with insurance claims related to Hartford.

The company discovered that the tapes were missing on September 27, and has since contacted the affected individuals by letter, as well as the offices of state attorneys general around the country. A Hartford spokesperson says there’s no evidence thus far that the tapes were stolen, or that the personal data was accessed or abused.

Those affected include Hartford’s personal insurance, automobile insurance, and homeowner’s insurance holders, as well as other customers and people “affiliated with The Hartford,” the spokesperson said.

The data breach was discovered after the tapes were found missing from their container. “We were unable to determine how they were misplaced,” the spokesperson said. These are tapes that would normally be sent to and stored at a secure, off-site third-party facility, and the spokesperson did not know if the tapes were lost in transit.

Hartford is offering individuals whose data is at risk to enroll in free identity theft protection service for one year, including credit monitoring, credit reports, and $20,000 in identity theft insurance. The company will also reimburse any credit breach costs, the spokesperson said.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.


Subscribe to RSS










Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:suse linux
Published:2010-01-22
Severity:High
Description:SUSE Linux Enterprise 10 SP3 (SLE10-SP3) configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:The URL validation functionality in Microsoft Internet Explorer 7 and 8 does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
Vulnerability:bind
Published:2010-01-22
Severity:Medium
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)