Compromises in 2011 affecting an unknown number
Compromises in 2011 affecting 10,000 or more
Compromises in 2011 affecting under 10,000
01/01/2011 Kinetic Concepts Inc, (KCI) a retail business in San Antonio, Texas
01/03/2011 Half Hitch Tackle a retail business in Panama City, Florida
01/04/2011 White Rock Networks a business other than retail in Plano, Texas
01/06/2011 Marsh U.S. Consumer, Seabury and Smith, ITT Corporation a business other than retail in Tulsa, Oklahoma
01/06/2011 Adventist Behavioral Health a healthcare provider or servicer in Rockville, Maryland
01/08/2011 Duval Clerk of Courts Government in Jacksonville, Florida
01/12/2011 Kadlec Regional Medical Center a healthcare provider or servicer in Richland, Washington
01/12/2011 Universal Medical Center a healthcare provider or servicer in Tucson, Arizona
01/18/2011 Iowa Telecommunications, Experian a business other than retail in Newtown, Iowa
01/19/2011 Abbott Medical Optics, Baylor College of Medicine Department of Ophthalmology a healthcare provider or servicer in Malpitas, California
01/19/2011 U.S. Postal Service Federal Government in St. Louis, Missouri
01/25/2011 MetLife a Financial or Insurance Services firm in Loves Park, Illinois
01/25/2011 Presbyterian Health Care Services a healthcare provider or servicer in Albuquerque, New Mexico
01/25/2011 Plainfield Board of Education an educational institution in Plainfield, New Jersey
01/26/2011 J. Press a retail business in New Haven, Connecticut
01/26/2011 Hamilton Beach Brands, Inc. a retail business in Glen Allen, Virginia
01/26/2011 KBR, Inc. a business other than retail in Houston, Texas
01/26/2011 Temple University School of Medicine a healthcare provider or servicer in Philadelphia, Pennsylvania
01/26/2011 North Carolina Department of Health and Human Services State Government in Raleigh, North Carolina
01/28/2011 Five County Credit Union a Financial or Insurance Services firm in Bath, Maine
01/28/2011 University of Iowa Hospitals and Clinics a healthcare provider or servicer in Iowa City, Iowa
01/29/2011 Bend Ophthamology a healthcare provider or servicer in Bend, Oregon
01/29/2011 Texas Health Harris Methodist Hospital Azle a healthcare provider or servicer in Azle, Texas
01/29/2011 Amazon.com a retail business in Seattle, Washington
01/30/2011 JP Morgan Chase, Citibank a Financial or Insurance Services firm in New York, New York
02/02/2011 Texas Children’s Hospital a healthcare provider or servicer in Houston, Texas
02/04/2011 Twitter, Facebook and PayPal a business other than retail in Rapides Parish, Louisiana
02/07/2011 Marriott Vacation Club International a retail business in Orlando, Florida
02/11/2011 First Transit, FirstGroup America a business other than retail in Cincinnati, Ohio
02/13/2011 Bank of America a Financial or Insurance Services firm in Charlotte, North Carolina
02/15/2011 Day’s Jewelers a retail business in Waterville, Maine
02/16/2011 Alabama Department of Motor Vehicles State Government in Alabama
02/17/2011 Winamp a business other than retail in New York, New York
02/18/2011 The Cigarette Box, Colton’s General Store a retail business in Las Vegas, Nevada
02/19/2011 Loud Technologies, Inc. a retail business in Woodinville, Washington
02/20/2011 Howard Brown Health Center a healthcare provider or servicer in Chicago, Illinois
02/22/2011 Jack in the Box a retail business in Pearland, Texas
02/24/2011 Prudential Patterson Realtors a business other than retail in Hazelwood, Missouri
02/24/2011 Snow Creek a business other than retail in Weston, Missouri
02/24/2011 The Kansas Attorney General was investigated for inadequate storage of evidence containing patient medical records. State Government in Olathe, Kansas
03/03/2011 Racetrac, Seacoast National Bank a retail business in Fort Pierce, Florida
03/08/2011 Western Michigan University an educational institution in Kalamazoo, Michigan
03/09/2011 Navy Federal Credit Union Military in Norfolk, Virginia
03/09/2011 Penn Mutual Life Insurance a Financial or Insurance Services firm in Philadelphia, Pennsylvania
03/09/2011 CVS Caremark Corp. a retail business in Woonsocket, Rhode Island
03/09/2011 Chapman University an educational institution in Orange, California
03/10/2011 Se San Diego Hotel a business other than retail in San Diego, California
03/10/2011 University of Massachusetts Amherst, University Health Services an educational institution in Amherst, Massachusetts
03/10/2011 TD Bank a Financial or Insurance Services firm in Elmwood Park, New Jersey
03/11/2011 Walgreens Co. a retail business in Deerfield, Illinois
03/18/2011 Randstad Professionals a business other than retail in Wakefield, Massachusetts
03/18/2011 Wheeler and Associates CPA a business other than retail in Boca Raton, Florida
03/18/2011 Spoiled Rotten Spa a retail business in Aptos, California
03/18/2011 Instant Tax Service a Financial or Insurance Services firm in Anderson, Indiana
03/21/2011 Tesoro High School an educational institution in Las Flores, California
03/22/2011 Lone Star Business Solutions a business other than retail in Wichita, Kansas
03/24/2011 TripAdvisor a business other than retail in Newton, Massachusetts
03/28/2011 The Briar Group LLC a retail business in Boston, Massachusetts
04/01/2011 iTunes (Apple) a retail business in Cupertino, California
04/04/2011 Applied Micro Circuits Corporation a retail business in Sunnyvale, California
04/06/2011 US Airways a business other than retail in Tempe, Arizona
04/08/2011 Broward County School Board, Private Medical Practices a business other than retail in , Florida
04/11/2011 Private Dental Practice a healthcare provider or servicer in Longmont, Colorado
04/13/2011 Internal Revenue Service Federal Government in Washington, DC
04/20/2011 Blockbuster Inc. a retail business in San Diego, California
04/20/2011 Institute of Electrical and Electronics Engineers (IEEE) a Non-Governmental Organization (includes non-profits) in New York, New York
04/21/2011 Infogroup a business other than retail in Omaha, Nebraska
05/03/2011 Office of Dr. Leslie Coleman, Staff Providers a healthcare provider or servicer in Atlanta, Georgia
05/04/2011 Netflix a retail business in Redwood City, California
05/04/2011 Merlin Information Services a business other than retail in Kalispell, Montana
05/05/2011 Private Legal Practice, Baker Moving and Storage a business other than retail in San Rafael, California
05/06/2011 Newington Police Department Local Government in Santa Maria, California
05/06/2011 Lockerman Family Chiropractic a healthcare provider or servicer in New Orleans, Louisiana
05/06/2011 Best Buy a retail business in San Francisco, California
05/07/2011 Central Oregon Community College (COCC) an educational institution in Montpelier, Vermont
05/09/2011 Assurant Employee Benefits a Financial or Insurance Services firm in Schenectady, New York
05/09/2011 Eastern Illinois University an educational institution in Las Vegas, Nevada
05/12/2011 Ohio State Auditor State Government in San Antonio, Texas
05/12/2011 Domino’s Pizza, KB Pizza a retail business in Fishers, Indiana
05/14/2011 Oregon Department of Motor Vehicles Oregon’s decades-old DMV database had been repeatedly and illegally sold. This time appearing in Indianapolis, Indiana
05/16/2011 SunTrust Bank a Financial or Insurance Services firm in Chicago, Illinois
05/19/2011 Delta Dental, The Smile Center a healthcare provider or servicer in Mount Pleasant, Texas
05/19/2011 Comfort Dental Offices a healthcare provider or servicer in Indianapolis, Indiana
05/20/2011 Excel Academy an educational institution in Castroville, Texas
05/24/2011 Soy Capital Bank and Trust a Financial or Insurance Services firm in Decatur, Illinois
05/25/2011 United Healthcare Inc. a healthcare provider or servicer in Pleasant Grove, Alabama
05/27/2011 LA Boxing a business other than retail in Ahwatukee, Arizona
05/27/2011 El Paso Garbage A concerned citizen found a dumpster containing checkbooks, federal income tax forms, W2’s, 1040’s, and more. Dates ranged from 2003 to 2007. Read what happened (and what didn’t happen) in El Paso, Texas
05/27/2011 Lockheed Martin a business other than retail in Bethesda, Maryland
05/27/2011 Loyola University Medical Center a healthcare provider or servicer in Chicago, Illinois
06/01/2011 Tax Matters a Financial or Insurance Services firm in El Paso, Texas
06/06/2011 Ravelry.com a business other than retail in Boston, Massachusetts
06/07/2011 Greenville Hospital System University Medical Center, Allen Bennett Memorial Hospital a healthcare provider or servicer in Greer, South Carolina
06/07/2011 Victor Victoria’s Restaurant, Renteria Catering a retail business in Bakersfield, California
06/08/2011 Denver Players, Denver Sugar a business other than retail in Denver, Colorado
06/09/2011 Burke County Courthouse County Government in Morganton, North Carolina
06/11/2011 Epic Games a retail business in Cary, North Carolina
06/14/2011 St. Louis University (SLU) an educational institution in St. Louis, Missouri
06/15/2011 Jackson National Life Insurance Company a Financial or Insurance Services firm in Lansing, Michigan
06/15/2011 Office of Dr. Morgan Camp and Associates a healthcare provider or servicer in Mill Valley, California
06/17/2011 Teachers Retirement System of Texas State Government in Austin, Texas
06/20/2011 Dropbox a retail business in San Francisco, California
06/20/2011 Lending Company a Financial or Insurance Services firm in Phoenix, Arizona
06/22/2011 Conor O’Neills Restaurant a retail business in Ann Arbor, Michigan
06/23/2011 Arizona Department of Public Safety (AZDPS) State Government in Phoenix, Arizona
06/23/2011 University of Central Missouri an educational institution in Warrensburg, Missouri
06/25/2011 Nashville Zoo a Non-Governmental Organization (includes non-profits) in Nashville, Tennessee
07/03/2011 Barnes-Jewish Hospital, The Siteman Cancer Center, Washington University a healthcare provider or servicer in Saint Louis, Montana
07/08/2011 Excela Health a healthcare provider or servicer in Jeannette, Pennsylvania
07/08/2011 All Pets Club a retail business in Branford, Connecticut
07/08/2011 Capital Grille a retail business in Orlando, Florida
07/08/2011 Universal Music a business other than retail in Universal City, California
07/09/2011 Geoff Gray Corporation (GGC) a Financial or Insurance Services firm in Hampstead, New Hampshire
07/13/2011 Metropolitan Health District a healthcare provider or servicer in San Antonio, Texas
07/13/2011 Walgreens.com a retail business in Deerfield, Illinois
07/13/2011 Meridian Health System a healthcare provider or servicer in Asbury Park, New Jersey
07/15/2011 University of Maryland Medical Center a healthcare provider or servicer in Baltimore, Maryland
07/15/2011 University of Maryland Medical Center a healthcare provider or servicer in Baltimore, Maryland
07/18/2011 Kitchen Place a retail business in Norfolk, Nebraska
07/21/2011 Zpizza a retail business in Irvine, California
07/21/2011 Extreme Pizza a retail business in San Francisco, California
07/21/2011 Mountain Mike’s Pizza a retail business in Martell, California
07/23/2011 Margarita’s Mexican Restaurant a retail business in Huntsville, Texas
07/26/2011 Esteé Lauder a retail business in New York, New York
07/30/2011 Wellness Centers of Atlanta a healthcare provider or servicer in Alpharetta, Georgia
07/31/2011 Tufts University, Massachusetts General Hospital (MGH) an educational institution in Boston, Massachusetts
07/31/2011 Ascensus a Financial or Insurance Services firm in Dresher, Pennsylvania
08/02/2011 Pocatello Family Medicine, Idaho State University a healthcare provider or servicer in Pocatello, Idaho
08/02/2011 Pocatello Family Medicine, Idaho State University a healthcare provider or servicer in Pocatello, Idaho
08/03/2011 Department of Veterans Affairs Federal Government in Washington, District Of Columbia
08/03/2011 Franklin County Children Services, Parenthesis Family Advocates County Government in Columbus, Ohio
08/04/2011 University of Arizona an educational institution in Tucson, Arizona
08/08/2011 Department of Veterans Affairs Federal Government in Fayetteville, North Carolina
08/11/2011 Eye Safety Systems a retail business in Sun Valley, Idaho
08/14/2011 Bethesda Softworks a retail business in Rockville, Maryland
08/18/2011 Citigroup, Inc., Bank of America, Corp. a retail business in New York, New York
08/23/2011 meridianEMR a retail business in Livingston, New Jersey
08/23/2011 Allstate Financial a Financial or Insurance Services firm in Norwalk, Connecticut
08/23/2011 Berkshire Bank a Financial or Insurance Services firm in Pittsfield, Massachusetts
09/01/2011 Harvard University an educational institution in Cambridge, Massachusetts
09/02/2011 Texas Police Chief Association offices in Elgin, Texas
09/09/2011 Methodist Hospital a healthcare provider or servicer in Houston, Texas
09/10/2011 Tampa Signal a retail business in Tampa, Florida
9/11/2011 SSL Certificate Problems
Follow along with this story about how fragile the concept of SSL certificates can be. A single hack allowed the issuance of certificates for security agencies such as at CIA, MI6, and Mossad. Other certificate issuers were impersonated including Thawte, Verisign, Comodo and Equifax. So were Facebook, Google, Microsoft, Yahoo!, Tor, Skype, LogMeIn, Twitter, Mozilla, AOL and WordPress.
7/10/2011 Dutch SSL certificate authority DigiNotar issued a certificate for “Google.com”.
8/27/2011 an alert user noticed a certificate warning in Google’s browser Chrome. The certificate DigiNotar issued had been used in an attempted “SSL man-in-the-middle (MITM) attacks against Google users, whereby someone tried to get between them and encrypted Google services. The people affected were primarily located in Iran.”
8/29/2011 DigiNotar had revoked the certificate, but many browsers do not check for revoked certificates. If there was a certificate, and it isn’t expired, that is sufficient for a trusted certificate. Mozilla revoked the root certificate for DigiNotar so any certificates they had issued were no longer trusted. This was effected by releasing new products versions. Google followed with a change to DigiNotar’s status in the next release of Chrome. Why? DigiNotar had not yet explained how the Google certificate was approved in the first place. (source)
8/30/2011 The parent company of DigiNotar issued a press release reporting they had been hacked, fraudulent certificates had been issued, and all fraudulently issued certificates had been revoked. Except, one they missed. Did this solve the problem? No. Remember, if a certificate from a trusted source is unexpired then it is trusted and that is the end of the process for most browsers.
On July 19th 2011, DigiNotar detected an intrusion into its Certificate Authority (CA) infrastructure, which resulted in the fraudulent issuance of public key certificate requests for a number of domains, including Google.com. Once it detected the intrusion, DigiNotar has acted in accordance with all relevant rules and procedures. At that time, an external security audit concluded that all fraudulently issued certificates were revoked. Recently, it was discovered that at least one fraudulent certificate had not been revoked at the time. After being notified by Dutch government organization Govcert, DigiNotar took immediate action and revoked the fraudulent certificate.
Yet the Google certificate was issued July 10th, 2011, more than a week before the reported hacking. This means the hackers were not discovered for some time. How did an audit miss the improper certificate for Google?
8/31/2011 Google blacklisted 247 SSL certificates issued by DigiNotar. (source)
9/04/2011 The number of revoked certificates has grown to over 530. DigiNotar (a “root” certificate) can assign authority to intermediaries to issue certificates in the name of DigiNotar. The hackers signed over 180 certificates including some with names of well-known certificate authorities like Thawte, Verisign, Comodo and Equifax. Other famous names with improper DigiNotar certificates included AOL, CIA, Facebook, Google, LogMeIn, MI6, Microsoft, Mossad, Mozilla, Yahoo!, Skype, Tor, Twitter, and WordPress. The complete list is on line with some more information.
… the Dutch Government [ is ] doing a great job keeping on top of things and doing the job that DigiNotar should’ve done in July. They sent a spreadsheet with a list of 531 entries on the currently known bad DigiNotar related certificates.
The list isn’t pretty and I’ve decided that in the interest of defenders everywhere without special connections, I’m going to disclose it. The people that I have spoken with in the Dutch Government agree with this course of action.
This disclosure will absolutely not help any attacker as it does not contain the raw certificates; it is merely metadata about the certificates that were issued. It includes who we should not trust in the future going forward and it shows what is missing at the moment. This is an incomplete list because DigiNotar’s audit trail is incomplete.
This is the list of CA roots that should probably never be trusted again:
DigiNotar Cyber CA
DigiNotar Extended Validation CA
DigiNotar Public CA 2025
DigiNotar Public CA – G2
Koninklijke Notariele Beroepsorganisatie CA
Stichting TTP Infos CAThe most egregious certs issued were for *.*.com and *.*.org while certificates for Windows Update and certificates for other hosts are of limited harm by comparison. The attackers also issued certificates in the names of other certificate authorities such as “VeriSign Root CA” and “Thawte Root CA” as we witnessed with ComodoGate, although we cannot determine whether they succeeded in creating any intermediate CA certs. That’s really saying something about the amount of damage a single compromised CA might inflict with poor security practices and regular internet luck.
Of particular note is this certificate:
CN=*.RamzShekaneBozorg.com,SN=PK000229200006593,
OU=Sare Toro Ham Mishkanam,L=Tehran,
O=Hameye Ramzaro Mishkanam,C=IRThe text here appears to be be an entry like any other but it is in fact a calling card from a Farsi speaker. RamzShekaneBozorg.com is not a valid domain as of this writing.
Thanks to an anonymous Farsi speaker, I now understand that the above certificate is actually a comment to anyone who bothers to read between the lines:
“RamzShekaneBozorg” is “great cracker”
“Hameyeh Ramzaro Mishkanam” translates to “I will crack all encryption”
“Sare Toro Ham Mishkanam” translates to “i hate/break your head”[ highlighting ours. More at the source -ed ]
The certificates for *.*.com and *.*.org were issued and, if valid, could allow them (whoever they were) to impersonate anything. More at Sophos.
09/12/2011 McDonald’s a retail business in Monticello, Minnesota
09/14/2011 Bright House Network a retail business in St. Petersburg, Florida
09/16/2011 Xavier University an educational institution in Cincinnati, Ohio
09/18/2011 Intelligence and National Security Alliance (INSA) a Non-Governmental Organization (includes non-profits) in Arlington, Virginia
09/20/2011 Good Samaritan Hospital a healthcare provider or servicer in Baltimore, Maryland
09/28/2011 Atlanta Perinatal Associates a healthcare provider or servicer in Atlanta, Georgia
10/03/2011 Dentistry at the Crest a healthcare provider or servicer in Aurora, Colorado
10/07/2011 James A. Haley Veterans Hospital a healthcare provider or servicer in Tampa Bay, Florida
10/11/2011 Community & Southern Bank a Financial or Insurance Services firm in Alabama, Georgia
10/11/2011 Genentech Inc. a retail business in San Francisco, California
10/11/2011 TechCentral a business other than retail in Arlington, Texas
10/14/2011 SEC & FTT Securities and Exchange Commission and Financial Tracking Technologies Federal Government and business other than retail in Washington, DC
10/16/2011 Law Office of Ashley Bell, Department of Family and Children Services, Court Appointed Special Advocates (CASA) a business other than retail in Gainesville, Florida
10/17/2011 Spectrum Health Systems, Inc. a healthcare provider or servicer in Worcester, Massachusetts
10/20/2011 Wells Fargo a Financial or Insurance Services firm in Jacksonville, Florida
10/20/2011 PSEG a business other than retail in Newark, New Jersey
10/20/2011 AdvancePierre Foods a retail business in Cincinnati, Ohio
10/22/2011 International Association of Chiefs of Police (IACP) also the Boston Police Patrolmen’s Association, Baldwin County Sheriff’s Office in Alabama and the Matrix Group multi-entity in multiple states
10/22/2011 Concordia Plan Services (CPS) a healthcare provider or servicer in St. Louis, Missouri
10/23/2011 Hazleton Community Ambulance Association a healthcare provider or servicer in Hazleton, Pennsylvania
10/25/2011 Indalex a business other than retail in Modesto, California
10/26/2011 Indigo Joes’ a retail business in Shelby, Alabama
10/27/2011 Clarinda Bank Iowa a Financial or Insurance Services firm in Clarinda, Iowa
10/27/2011 Eaton Group a business other than retail in Baton Rouge, Louisiana
10/27/2011 James A. Haley VA Hospital a healthcare provider or servicer in Tampa, Florida
10/27/2011 Eaton Group a business other than retail in Baton Rouge, Louisiana
10/27/2011 James A. Haley VA Hospital a healthcare provider or servicer in Tampa, Florida
11/02/2011 University of Alabama an educational institution in Tuscaloosa, Alabama
11/04/2011 Harvard University Health Services, Anna Jacques Hospital, Lowell General Hospital, Saints Medical Center a healthcare provider or servicer in Massachusetts
11/04/2011 Washington South Supervisory Union in Northfield, Vermont
11/04/2011 Portsmouth Hospital a healthcare provider or servicer in Manchester, New Hampshire
11/05/2011 McDonald’s a retail business in Peoria, Illinois
11/13/2011 Brownsville Independent School District an educational institution in Brownsville, Texas
11/15/2011 Stephen F. Austin Hotel a business other than retail in Austin, Texas
11/15/2011 Berkely HeartLab (BHL) a healthcare provider or servicer in Berkeley, California
11/15/2011 Citizens Equity First Credit Union (CEFCU) a Financial or Insurance Services firm in Peoria, Illinois
11/18/2011 McDonald’s a retail business in Savannah, Georgia
11/18/2011 Community Tax a Financial or Insurance Services firm in Wetumpka, Alabama
11/18/2011 Sawicki and Phelps a business other than retail in Minneapolis, Minnesota
11/19/2011 Lebanon Internal Medicine Associates, P.C. a healthcare provider or servicer in Lebanon, Pennsylvania
11/21/2011 Blairsville High School an educational institution in Blairsville, Pennsylvania
11/21/2011 Ohio Rehabilitation Services Commission State Government in Columbus, Ohio
11/21/2011 AT&T a business other than retail in Dallas, Texas
11/22/2011 YMCA of Metro Atlanta a Non-Governmental Organization (includes non-profits) in Atlanta, Georgia
11/22/2011 Virtual Radiological Professionals (vRad) a healthcare provider or servicer in Eden Prairie, Minnesota
11/22/2011 Gary Vaynerchuk’s Wine Library a retail business in Springfield, New Jersey
11/23/2011 MassBay Community College an educational institution in Wellesley, Massachusetts
11/26/2011 Skagit County Health Department Country Government in Mount Vernon, Washington
12/01/2011 Extreme Pizza a retail business in Omaha, Nebraska
12/02/2011 University of Kansas (KU) an educational institution in Lawrence, Kansas
12/02/2011 Transcend Capital a Financial or Insurance Services firm in Dallas, Texas
12/03/2011 Contra Costa County County Government in Martinez, California
12/12/2011 Fletcher Allen Health Care a healthcare provider or servicer in Burlington, Vermont
12/13/2011 Mr. Janitor, Eagle Harbor Country Club a business other than retail in St. Augustine, Florida
12/14/2011 Trilegiant Corporation a business other than retail in Stamford, Connecticut
12/16/2011 United Jewish Appeal – Federation of Jewish Philanthropies of New York Inc. (UJA-Federation) a Non-Governmental Organization (includes non-profits) in New York, New York
12/16/2011 North Penn School District (NPSD) Government in Lansdale, Pennsylvania
12/17/2011 Office of Paul C. Brown, M.D., P.S. a healthcare provider or servicer in Renton, Washington
12/20/2011 MyVetDirect.com, Butler Schein Animal Health (BSAH) a business other than retail in Dublin, Ohio
12/21/2011 Ridgewood Public Schools Government in Ridgewood, New Jersey
12/22/2011 Oahu District Tax Office, State Tax Department State Government in Oahu, Hawaii
12/22/2011 Pearl River Resort a business other than retail in Neshoba, Mississippi
12/24/2011 Office of the New York City Public Advocate a Non-Governmental Organization (includes non-profits) in New York, New York
12/24/2011 Office of the New York City Public Advocate a Non-Governmental Organization (includes non-profits) in New York, New York
12/28/2011 N/L Entertainment, Alamo Drafthouse Cinemas a business other than retail in Winchester, Virginia
12/28/2011 Automatic Data Processing (ADP), A.W. Hastings’ a business other than retail in Westlake Village, California
12/30/2011 Care2.com a retail business in Redwood City, California
12/31/2011 California Statewide Law Enforcement Association (CSLEA) in Sacramento, California
12/31/2011 New York State Association of Chiefs of Police in Schenectady, New York
In addition to sources cited above the Chronology of Data Base Breaches maintained by the Privacy Rights Clearinghouse was used. Their website is a valuable resource for those seeking information on basic privacy, identity theft, medical privacy and much more. They are highly recommended.
View the 2011 summary
Return to References page
Return to Year links page
Links above were active at the time they were gathered.
