Local 2/Hospitality Industry Child & Elder Care Plan

On August 13, 2012, the Local 2/Hospitality Industry Child & Elder Care Plan experienced a data breach when a portable USB drive containing sensitive participant files was lost. The exposed data included names, Social Security Numbers (SSNs), and addresses of individuals enrolled in the plan. While the exact number of affected individuals remains unknown, the breach posed a significant risk of identity theft, financial fraud, and unauthorized access to personal information. The incident was reported to the California Office of the Attorney General on September 11, 2012, highlighting a failure in data protection protocols, particularly regarding the secure handling and storage of portable media. The loss of such sensitive data especially SSNs increases the likelihood of long-term harm to affected individuals, including potential fraudulent account openings, credit damage, and targeted phishing attacks. Given the nature of the exposed information, the breach underscores the vulnerability of unencrypted or improperly secured devices in organizational workflows, particularly in sectors handling healthcare and dependent care benefits, where trust and confidentiality are critical.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-36426

TPRM report: https://www.rankiteo.com/company/child-&-family

"id": "chi237090425",
"linkid": "child-&-family",
"type": "Breach",
"date": "8/2012",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown (exact number not '
                                              'disclosed)',
                        'industry': 'Healthcare & Social Assistance',
                        'location': 'California, USA',
                        'name': 'Local 2/Hospitality Industry Child & Elder '
                                'Care Plan',
                        'type': 'Healthcare/Child & Elder Care Plan'}],
 'attack_vector': 'Physical Loss (Portable USB Drive)',
 'data_breach': {'data_exfiltration': 'No (device lost, not confirmed '
                                      'exfiltrated)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers',
                                                         'Addresses'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2012-08-13',
 'date_publicly_disclosed': '2012-09-11',
 'description': 'The California Office of the Attorney General reported a data '
                'breach concerning the Local 2/Hospitality Industry Child & '
                'Elder Care Plan on September 11, 2012. The breach occurred on '
                'August 13, 2012, when a portable USB drive containing '
                'participant files was lost, possibly exposing names, Social '
                'Security Numbers, and addresses of affected individuals, '
                'though the exact number of individuals affected is unknown.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security Numbers',
                                 'Addresses'],
            'identity_theft_risk': 'Potential (due to exposed PII)'},
 'post_incident_analysis': {'root_causes': 'Loss of unsecured portable USB '
                                           'drive containing sensitive '
                                           'participant data'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to California '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'title': 'Data Breach at Local 2/Hospitality Industry Child & Elder Care Plan '
          '(2012)',
 'type': 'Data Breach (Lost Device)'}