Vermont credit union discards unencrypted data of 85,000

Two unencrypted backup tapes from Vermont's largest credit union, the Montpelier-based Vermont State Employees Credit Union, are believed to have been accidentally thrown away.

How many victims? Up to 85,000 credit union members.

What type of personal information? Names, Social Security numbers, driver's license numbers, addresses, account information and transaction records.

What happened? The tapes were discovered missing during an inventory check in September. An internal investigation led credit union officials to believe the data had been thrown away.

What was the response? Notification letters were sent to customers Wednesday. The financial institution is providing one year of free year credit monitoring to victims. The credit union also set up a temporary call center for customers with questions.

Details: There have been no cases, so far, of customers reporting fraud due to the incident.

Quote: “[T]here was no indication of a crime, and no indication this information was used and every indication it was thrown out in the trash and is in the landfill,” Steve Post, the credit union's CEO.

A similar breach happened at TD Bank in March, where customers were notified that two backup tapes containing their personal data had been lost -- six months after the fact.

Source: VTDigger.org, VSECU data for 85,000 customers ends up in landfill,” Oct. 24, 2012.

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.