Security Breach Notices

Any business or government agency that owns or licenses personal information of residents of Hawaii is obligated to give written notice of security breaches to the Office of Consumer Protection (OCP) when one-thousand (1000) or more Hawaii residents are affected by the security breach. § 487N-2(f), Hawaii Revised Statutes.

The table below lists OCP cases where a business or government agency reported a security breach, where one-thousand or more Hawaii residents were affected. The OCP categorizes security breaches by type (in order of frequency): Hackers/Unauthorized Access; Stolen Laptops, Computers & Equipment; Release/Display of Information; Data Theft by Employee or Contractor; Lost in Transit; and Phishing.

For more information, please see the overall security breach statistics for Hawaii.

Date NotifiedCase NumberBreached Entity NameBreach typeHawaii Residents ImpactedLink to Letter
08/24/20202021-0211Arbiter Sports, LLCHackers/Unauthorized Access1223Letter PDF
03/15/212021-0266Flagstaff BankHackers/Unauthorized Access3494Letter PDF
3/31/20212021-0305Med-Data IncorporatedHackers/Unauthorized Access1396Letter PDF
4/23/20212021-0278Foodland Super MarketHackers/Unauthorized Access35963Letter PDF
6/10/20212021-0359Volkswagen Group of AmericaHackers/Unauthorized Access6261Letter PDF
6/12/20212021-0519Atlas Insurance Agency, Inc.Hackers/Unauthorized Access1652Letter PDF
6/18/20212021-0518Herff Jones, LLC Hackers/Unauthorized Access3373Letter PDF
6/22/20212021-0401Hawaii Payroll Services, LLC Hackers/Unauthorized Access4500Letter PDF
1/14/20212021-0087Waters & Kraus LLPHackers/Unauthorized Access1339Letter PDF
12/30/202021-0041Zoetop Business Co. Ltd dba www.romwe.comHackers/Unauthorized Access30,382Letter PDF
4/20/20202020-0196Volusion, LLCHackers/Unauthorized Access1,480Letter PDF
12/20/20192019-0554Jambav, Inc. ("ToonDoo")Hackers/Unauthorized Access7173Letter PDF
09/13/20192019-0436Amateur Athletic UnionHackers/Unauthorized Access2977Letter PDF
06/25/2019OCP 2019-0296Oklahoma Department of SecuritiesHackers/Unauthorized Access1028Letter PDF
06/13/2019OCP 2019-0297Mediant Communications Inc.Hackers/Unauthorized Access1774Letter PDF
03/15/2019OCP-2019-0117flexPATH StrategiesHackers/Unauthorized Access1,573Letter PDF
11/8/2018OCP-2018-0599Thesy, LLCHackers/Unauthorized Access2,642Letter PDF
10/30/2018OCP-2018-0552Bankers LifeHackers/Unauthorized Access4,328Letter PDF
07/25/2018OCP-2018-0314ComplyRight, Inc.Hackers/Unauthorized Access3,747Letter PDF
05/30/18OCP-2018-0303Global UniversityHackers/Unauthorized Access1,333Letter PDF
05/18/18OCP-2018-0206TaskRabbit, Inc.Hackers/Unauthorized Access4,062Letter PDF
4/26/2018OCP-2018-0161Delta Air Lines, Inc.Hackers/Unauthorized Access2,831Letter PDF
04/04/18OCP-2018-0133Orbitz, LLCHackers/Unauthorized Access1,078Letter PDF
7/7/2017OCP-2017-0302Aqua-Aston Hospitality, LLCHackers/Unauthorized Access1,056Letter PDF
4/28/2017OCP-2017-0304Jackson Hewitt Tax Services, Inc.Hackers/Unauthorized Access5,659Letter PDF
4/11/2017OCP-2017-0179Nutrex Hawaii, Inc.Hackers/Unauthorized Access1,168Letter PDF
4/11/2017OCP-2017-0180Tempur-PedicHackers/Unauthorized Access1,302Letter PDF
4/11/2017OCP-2017-0181Plow & HearthHackers/Unauthorized Access1,834Letter PDF
3/9/2017OCP-2017-0118prAnaHackers/Unauthorized Access1,553Letter PDF
1/19/2017OCP-2017-0034Spiraledge, Inc.Hackers/Unauthorized Access1,823Letter PDF
8/22/2016OCP-2016-0445Active OutdoorsHackers/Unauthorized Access3,984Letter PDF
5/11/2016OCP-2016-0247doTERRA International, LLCHackers/Unauthorized Access17,315Letter PDF
3/18/2016OCP-2016-0145BaileysOnline.comHackers/Unauthorized Access1,319Letter PDF
2/9/2016OCP-2016-0087Gyft, Inc.Hackers/Unauthorized Access1,706Letter PDF
12/31/2015OCP-2016-0044Matson Navigation Company, Inc.Stolen Laptops, Computers & Equipment1,150Letter PDF
11/12/2015OCP-2015-0692Digital Theatre, LLCHackers/Unauthorized Access1,453Letter PDF
10/12/2015OCP-2015-0631ScottradeHackers/Unauthorized Access32,778Letter PDF
09/29/2015OCP-2015-0605Costco Photo CenterHackers/Unauthorized Access4,436Letter PDF
09/25/2015OCP-2015-0602Yapstone, Inc.Hackers/Unauthorized Access3,486Letter PDF
09/03/2015OCP-2015-0543Hawaii First Federal Credit UnionHackers/Unauthorized Access5,965Letter PDF
07/22/2015OCP-2015-0447UCLA Health ServicesHackers/Unauthorized Access5,446Letter PDF
07/09/2015OCP-2015-0419Automotive Recovery Services, Inc. dba Vehicle Donation Processing CenterHackers/Unauthorized Access1,163Letter PDF
3/24/2015OCP-2015-0207Premera Blue CrossHackers/Unauthorized Access19,174Letter PDF
02/20/2015OCP-2015-0104Oahu PublicationsHackers/Unauthorized Access3,543Letter PDF
02/12/2015OCP-2015-0082Anthem, Inc.Hackers/Unauthorized Access18,206Letter PDF
12/19/2014OCP-2014-1045IBEW, Local 1357Lost in Transit4,360Letter PDF
09/23/2014OCP-2014-0884ViatorHackers/Unauthorized Access2,500Letter PDF
09/10/2014OCP-2014-0839The Home Depot, Inc.Hackers/Unauthorized AccessUnknownLetter PDF
07/29/2014OCP-2014-0767Time Northern Trust CompanyRelease/Display of Information1,267Letter PDF
02/27/2014OCP-2014-0113AIG Life and Retirement, The Variable Annuity Life Insurance Co.Data Theft by Employee or Contractor4,015Letter PDF
01/25/2014OCP-2014-0039Neiman Marcus GroupHackers/Unauthorized Access9,680Letter PDF
12/20/2013OCP-2014-0790Target CorporationHackers/Unauthorized Access121,000Letter PDF
12/13/2013OCP-2013-0775Maricopa Community CollegeHackers/Unauthorized Access3,828Letter PDF
12/09/2013OCP-2013-0770J.P. Morgan Chase Bank, N.A.Hackers/Unauthorized Access3,903Letter PDF
10/09/2013OCP-2013-0653Adobe SystemsHackers/Unauthorized Access9,439Letter PDF
11/28/2012OCP-2012-1358State of South Carolina, Dept. of RevenuePhishing2,394Letter PDF
02/21/2012OCP-2012-0353Trident University c/o Baker Hostetler, LLPHackers/Unauthorized Access1,423Letter PDF
04/19/2011OCP-2011-0599ABM Industries IncorporatedStolen Laptops, Computers & Equipment1,523Letter PDF
03/17/2011OCP-2011-0545Health Net, Inc.Lost in Transit1,175Letter PDF
01/3/2011OCP-2011-0153Pentagon Federal Credit UnionHackers/Unauthorized Access2,916Letter PDF
01/05/2010OCP-2010-0017Lincoln Financial Advisors Corporation (LFA & LFS)Hackers/Unauthorized Access2,100Letter PDF
08/05/2009OCP-2009-1374Network Solutions, Inc.Hackers/Unauthorized Access2,350Letter PDF
10/14/2008OCP-2008-1040Wyndham Hotels and Resorts, LLCHackers/Unauthorized Access1,000Not available
06/27/2008OCP-2008-0755Punahou SchoolStolen Laptops, Computers & Equipment2,067Not available
07/11/2008OCP-2008-069224 Hour Fitness USA, Inc.Stolen Laptops, Computers & Equipment1,506Not available
06/26/2008OCP-2008-660National Western Life Insurance CompanyRelease/Display of Information1,011Not available
04/18/2008OCP-2008-0426Lending TreeData Theft by Employee or Contractor8,368Not available
12/27/2007OCP-2008-0002GE Money-AmericasData Theft by Employee or Contractor1,181Not available
09/28/2009OCP-2007-1537Gap Inc.Stolen Laptops, Computers & Equipment2,100Not available
09/14/2007OCP-2007-1357TD AmeritradeHackers/Unauthorized Access33,157Not available
07/13/2007OCP-2007-1017Walt Disney Company, The dba Buena Vista Catalogue CompanyData Theft by Employee or Contractor2,457Not available
07/04/2007OCP-2007-0991Fidelity National Information Services, Inc. dba FISData Theft by Employee or Contractor6,000Not available