Security Breach Notices

Any business or government agency that owns or licenses personal information of residents of Hawaii is obligated to give written notice of security breaches to the Office of Consumer Protection (OCP) when one-thousand (1000) or more Hawaii residents are affected by the security breach. § 487N-2(f), Hawaii Revised Statutes.

The table below lists OCP cases where a business or government agency reported a security breach, where one-thousand or more Hawaii residents were affected. The OCP categorizes security breaches by type (in order of frequency): Hackers/Unauthorized Access; Stolen Laptops, Computers & Equipment; Release/Display of Information; Data Theft by Employee or Contractor; Lost in Transit; and Phishing.

To view the overall security breach statistics for Hawaii, please click here.

Date Notified Case Number Breached Entity Name Breach type Hawaii Residents Impacted Link to Letter
7/7/2017 OCP-2017-0302 Aqua-Aston Hospitality, LLC Hackers/Unauthorized Access 1,056 Link
4/28/2017 OCP-2017-0304 Jackson Hewitt Tax Services, Inc. Hackers/Unauthorized Access 5,659 Link
4/11/2017 OCP-2017-0179 Nutrex Hawaii, Inc. Hackers/Unauthorized Access 1,168 Link
4/11/2017 OCP-2017-0180 Tempur-Pedic Hackers/Unauthorized Access 1,302 Link
4/11/2017 OCP-2017-0181 Plow & Hearth Hackers/Unauthorized Access 1,834 Link
3/9/2017 OCP-2017-0118 prAna Hackers/Unauthorized Access 1,553 Link
1/19/2017 OCP-2017-0034 Spiraledge, Inc. Hackers/Unauthorized Access 1,823 Link
8/22/2016 OCP-2016-0445 Active Outdoors Hackers/Unauthorized Access 3,984 Link
5/11/2016 OCP-2016-0247 doTERRA International, LLC Hackers/Unauthorized Access 17,315 Link
3/18/2016 OCP-2016-0145 Hackers/Unauthorized Access 1,319 Link
2/9/2016 OCP-2016-0087 Gyft, Inc. Hackers/Unauthorized Access 1,706 Link
12/31/2015 OCP-2016-0044 Matson Navigation Company, Inc. Stolen Laptops, Computers & Equipment 1,150 Link
11/12/2015 OCP-2015-0692 Digital Theatre, LLC Hackers/Unauthorized Access 1,453 Link
10/12/2015 OCP-2015-0631 Scottrade Hackers/Unauthorized Access 32,778 Link
09/29/2015 OCP-2015-0605 Costco Photo Center Hackers/Unauthorized Access 4,436 Link
09/25/2015 OCP-2015-0602 Yapstone, Inc. Hackers/Unauthorized Access 3,486 Link
09/03/2015 OCP-2015-0543 Hawaii First Federal Credit Union Hackers/Unauthorized Access 5,965 Link
07/22/2015 OCP-2015-0447 UCLA Health Services Hackers/Unauthorized Access 5,446 Link
07/09/2015 OCP-2015-0419 Automotive Recovery Services, Inc. dba Vehicle Donation Processing Center Hackers/Unauthorized Access 1,163 Link
3/24/2015 OCP-2015-0207 Premera Blue Cross Hackers/Unauthorized Access 19,174 Link
02/20/2015 OCP-2015-0104 Oahu Publications Hackers/Unauthorized Access 3,543 Link
02/12/2015 OCP-2015-0082 Anthem, Inc. Hackers/Unauthorized Access 18,206 Link
12/19/2014 OCP-2014-1045 IBEW, Local 1357 Lost in Transit 4,360 Link
09/23/2014 OCP-2014-0884 Viator Hackers/Unauthorized Access 2,500 Link
09/10/2014 OCP-2014-0839 The Home Depot, Inc. Hackers/Unauthorized Access Unknown Link
07/29/2014 OCP-2014-0767 Time Northern Trust Company Release/Display of Information 1,267 Link
02/27/2014 OCP-2014-0113 AIG Life and Retirement, The Variable Annuity Life Insurance Co. Data Theft by Employee or Contractor 4,015 Link
01/25/2014 OCP-2014-0039 Neiman Marcus Group Hackers/Unauthorized Access 9,680 Link
12/20/2013 OCP-2014-0790 Target Corporation Hackers/Unauthorized Access 121,000 Link
12/13/2013 OCP-2013-0775 Maricopa Community College Hackers/Unauthorized Access 3,828 Link
12/09/2013 OCP-2013-0770 J.P. Morgan Chase Bank, N.A. Hackers/Unauthorized Access 3,903 Link
10/09/2013 OCP-2013-0653 Adobe Systems Hackers/Unauthorized Access 9,439 Link
11/28/2012 OCP-2012-1358 State of South Carolina, Dept. of Revenue Phishing 2,394 Link
02/21/2012 OCP-2012-0353 Trident University c/o Baker Hostetler, LLP Hackers/Unauthorized Access 1,423 Link
04/19/2011 OCP-2011-0599 ABM Industries Incorporated Stolen Laptops, Computers & Equipment 1,523 Link
03/17/2011 OCP-2011-0545 Health Net, Inc. Lost in Transit 1,175 Link
01/3/2011 OCP-2011-0153 Pentagon Federal Credit Union Hackers/Unauthorized Access 2,916 Link
01/05/2010 OCP-2010-0017 Lincoln Financial Advisors Corporation (LFA & LFS) Hackers/Unauthorized Access 2,100 Link
08/05/2009 OCP-2009-1374 Network Solutions, Inc. Hackers/Unauthorized Access 2,350 Link
10/14/2008 OCP-2008-1040 Wyndham Hotels and Resorts, LLC Hackers/Unauthorized Access 1,000 Not available
06/27/2008 OCP-2008-0755 Punahou School Stolen Laptops, Computers & Equipment 2,067 Not available
07/11/2008 OCP-2008-0692 24 Hour Fitness USA, Inc. Stolen Laptops, Computers & Equipment 1,506 Not available
06/26/2008 OCP-2008-660 National Western Life Insurance Company Release/Display of Information 1,011 Not available
04/18/2008 OCP-2008-0426 Lending Tree Data Theft by Employee or Contractor 8,368 Not available
12/27/2007 OCP-2008-0002 GE Money-Americas Data Theft by Employee or Contractor 1,181 Not available
09/28/2009 OCP-2007-1537 Gap Inc. Stolen Laptops, Computers & Equipment 2,100 Not available
09/14/2007 OCP-2007-1357 TD Ameritrade Hackers/Unauthorized Access 33,157 Not available
07/13/2007 OCP-2007-1017 Walt Disney Company, The dba Buena Vista Catalogue Company Data Theft by Employee or Contractor 2,457 Not available
07/04/2007 OCP-2007-0991 Fidelity National Information Services, Inc. dba FIS Data Theft by Employee or Contractor 6,000 Not available