What types of personal information? Names, addresses, phone numbers, email addresses and Social Security numbers.
Details: The data was not encrypted. The Vista employee violated the security policies of Vista and AES
What was the response? AES notified all victims by letter on July 20, and recommended a fraud alert be placed with credit bureaus. A police report was filed on July 17. AES will conduct a physical security audit.
Quote: “We are deeply sorry for the concern this may cause you, but we assure you that we take our responsibility to protect the privacy and security of our customers’ information very seriously,” said Jody L.W. Angelini, vice president, AES enterprise security office.
Source: Pittsburgh Post-Gazette, July 27, “5,000 student loan customers’ info on stolen laptop"