Data Breaches – April 2017

HealthNow Networks
Date of Breach: Unknown – Exposed for Many Months
Date Made Public: April 10, 2017 Records Affected: 918,000

Data Compromised: The data of 918,000 patients who provided sensitive information to HealthNow Networks in Boca Raton, FL has been exposed online for many months. Information exposed included names, addresses, email addresses, telephone numbers, Social Security numbers, dates of birth, health insurance information and medical conditions. HealthNow Networks is no longer in business; however, the database was stored in an unprotected root folder on an Amazon Web Service Installation owned by a private software developer. The data has since been deleted.

Click here to learn more

—————————————————————————

Shoney’s Restaurants/Best American Hospitality Corp
Date of Breach: December 27, 2016 – March 6, 2017
Date Made Public: April 16, 2017
Records Affected: Unknown

Data Compromised: Credit card information was compromised in 37 of Shoney’s 150 locations. At first it was thought to be linked to the Shoney’s system; however, Best American Hospitality Corporate has since claimed responsibility for these issues. Malware was installed remotely on the point of sale system that was used to process credit cards in the 37 locations, and was able to obtain cardholder names, card numbers, expiration dates, and internal verification codes. The issue has been resolved, but a list of affected restaurants can be found here.

Click here to learn more

—————————————————————————

GameStop.com
Date of Breach: September 2016 – February 2017
Date Made Public: April 7, 2017
Records Affected: Unknown

Data Compromised: GameStop is investigating reports that customer data and payment information may have been compromised on their website, gamestop.com. The compromised data is thought to include customer names, credit card numbers, expiration dates, CVV2 codes and addresses. This investigation is ongoing, and GameStop has engaged the services of a firm to help them investigate the breach further.

Click here to learn more

—————————————————————————

IRS – FAFSA Forms (Financial Aid)
Date of Breach: Unknown
Date Made Public: April 6, 2017
Records Affected: 100,000

Data Compromised: Internal Revenue Service Commissioner John Koskinen said that up to 100,000 taxpayers may have had their information stolen in a breach of an online tool used to apply for federal student aid. About 8,000 fraudulent refunds were issued (total of about $30 million), while 14,000 were stopped and 52,000 were prevented from processing. The IRS is notifying those taxpayers who may have been affected.

Click here to learn more

—————————————————————————

Westminster College – W-2 Breach
Date of Breach: January 2017
Date Made Public: March 26, 2017
Records Affected: Not released

Data Compromised: Westminster College in Missouri experienced a W-2 data breach in January. According to the college, student academic records and financial aid records were not compromised. A phishing email duped an employee into sending W-2 records to an unknown source impersonating a Westminster College employee. The college notified affected employees and law enforcement and is offering those affected a year-long subscription to an identity theft protection service.

Click here to learn more