Security Breach Notices
Any business or government agency that owns or licenses personal information of residents of Hawaii is obligated to give written notice of security breaches to the Office of Consumer Protection (OCP) when one-thousand (1000) or more Hawaii residents are affected by the security breach. § 487N-2(f), Hawaii Revised Statutes.
The table below lists OCP cases where a business or government agency reported a security breach, where one-thousand or more Hawaii residents were affected. The OCP categorizes security breaches by type (in order of frequency): Hackers/Unauthorized Access; Stolen Laptops, Computers & Equipment; Release/Display of Information; Data Theft by Employee or Contractor; Lost in Transit; and Phishing.
| Date Notified | Case Number | Breached Entity Name | Breach type | Hawaii Residents Impacted | Link to Letter |
|---|---|---|---|---|---|
| 2024/04/01 | 2024-0299 | Hartford Life and Accident Insurance Company/ WebTPA Employer Services, LLC | Hackers/Unauthorized Access | 4,972 | Letter PDF |
| 2024/03.18 | 2024-0295 | Delta Dental of California | Hackers/Unauthorized Access | 8,553 | Letter PDF |
| 2024/03.08 | 2024-0281 | Pacific Guardian Life Insurance Company, Limited | Hackers/Unauthorized Access | 61,500 | |
| 2024/03.04 | 2024-0280 | Oahu Publications, Inc. | Hackers/Unauthorized Access | 2,000 | Letter PDF |
| 2024/03.01 | 2024-0298 | Prudential Financial, Inc. | Hackers/Unauthorized Access | 16,420 | Letter PDF |
| 2024/02.28 | 2024-0291 | Houser LLP | Hackers/Unauthorized Access | 1,620 | Letter PDF |
| 2024/02.23 | 2024-0284 | loanDepot.com, LLC | Hackers/Unauthorized Access | 82,677 | Letter PDF |
| 2024/02.23 | 2024-0279 | Bacon-Universal Holdings, LLC | Hackers/Unauthorized Access | 3,238 | Letter PDF |
| 2024/01.09 | 2024-0086 | Navvis & Company, LLC (HMSA) | Hackers/Unauthorized Access | 765,370 | Letter PDF |
| 2023/04.07 | 2023-0440 | HawaiiUSA Federal Credit Union | Hackers/Unauthorized Access | 18,651 | Letter PDF |
| 2023/03.24 | 2023-0439 | Bank of America | Hackers/Unauthorized Access | 1,664 | Letter PDF |
| 2022/09.09 | 2022-1589 | U-Haul International, Inc. | Hackers/Unauthorized Access | 4,608 | Letter PDF |
| 2022/08.26 | 2022-1495 | Edfinancial (Nelnet) | Hackers/Unauthorized Access | 4,229 | Letter PDF |
| 2022/06.30 | 2022-1196 | PlanMember Securities | Hackers/Unauthorized Access | 3,349 | Letter PDF |
| 2022/06.30 | 2022-1195 | Aloha Laser Vision, LLC | Hackers/Unauthorized Access | 39,087 | Letter PDF |
| 2022/06.17 | 2022-1215 | Flagstar Bank, FSB | Hackers/Unauthorized Access | 2,115 | Letter PDF |
| 2022/05.24 | 2022-1020 | Horizon Actuarial Services, LLC | Hackers/Unauthorized Access | 5,793 | Letter PDF |
| 2022/04.06 | 2022-0773 | Pingora Loan Servicing | Hackers/Unauthorized Access | 7,002 | Letter PDF |
| 2022/03.18 | 2022-0596 | Lakeview Loan Servicing, LLC | Hackers/Unauthorized Access | 13,414 | Letter PDF |
| 2021/12.16 | 2021-1276 | Tennis Warehouse, LLC | Hackers/Unauthorized Access | 1,841 | Letter PDF |
| 2021/12.16 | 2021-1274 | Running Warehouse, LLC | Hackers/Unauthorized Access | 1,071 | Letter PDF |
| 2021/12.16 | 2021-1272 | Oahu Transit Services, Inc. (TheBus, TheHandi-Van) | Hackers/Unauthorized Access | 2,000 | Letter PDF |
| 2021/11.23 | 2021-1220 | Statewide Safety System | Hackers/Unauthorized Access | 1,190 | Letter PDF |
| 2021/11.22 | 2021-1218 | Astoria Company | Hackers/Unauthorized Access | 3,290 | Letter PDF |
| 2021/11.15 | 2021-1143 | California Pizza Kitchen | Hackers/Unauthorized Access | 4,800 | Letter PDF |
| 2021/10.04 | 2021-0798 | University Medical Center of Southern Nevada | Hackers/Unauthorized Access | 5,798 | Letter PDF |
| 2021/09.30 | 2021-0893 | Neiman Marcus Group, LLC | Hackers/Unauthorized Access | 19,070 | Letter PDF |
| 2021/09.03 | 2021-0725 | Hawaiian Dredging Construction Company | Hackers/Unauthorized Access | 3,756 | Letter PDF |
| 2021/07.08 | 2021-1070 | Arthur J. Gallagher & Co. | Hackers/Unauthorized Access | 2,345 | Letter PDF |
| 2021/01.14 | 2021-0082 | National Western Life Insurance Company | Hackers/Unauthorized Access | 8,373 | Letter PDF |
| 2021/04.23 | 2021-0278 | Foodland Super Market | Hackers/Unauthorized Access | 35,963 | Letter PDF |
| 2021/03.31 | 2021-0305 | Med-Data Incorporated | Hackers/Unauthorized Access | 1,396 | Letter PDF |
| 2021/03.15 | 2021-0266 | Flagstaff Bank | Hackers/Unauthorized Access | 3,494 | Letter PDF |
| 2021/06.22 | 2021-0401 | Hawaii Payroll Services, LLC | Hackers/Unauthorized Access | 4,500 | Letter PDF |
| 2021/06.18 | 2021-0518 | Herff Jones, LLC | Hackers/Unauthorized Access | 3,373 | Letter PDF |
| 2021/06.12 | 2021-0519 | Atlas Insurance Agency, Inc. | Hackers/Unauthorized Access | 1,652 | Letter PDF |
| 2021/06.10 | 2021-0359 | Volkswagen Group of America | Hackers/Unauthorized Access | 6,261 | Letter PDF |
| 2021/01.14 | 2021-0087 | Waters & Kraus LLP | Hackers/Unauthorized Access | 1,339 | Letter PDF |
| 2020/12.31 | 2021-0041 | Zoetop Business Co. Ltd dba www.romwe.com | Hackers/Unauthorized Access | 30,382 | Letter PDF |
| 2020/08.24 | 2021-0211 | Arbiter Sports, LLC | Hackers/Unauthorized Access | 1,223 | Letter PDF |
| 2020/04.20 | 2020-0196 | Volusion, LLC | Hackers/Unauthorized Access | 1,480 | Letter PDF |
| 2019/12.20 | 2019-0554 | Jambav, Inc. ("ToonDoo") | Hackers/Unauthorized Access | 7,173 | Letter PDF |
| 2019/09.13 | 2019-0436 | Amateur Athletic Union | Hackers/Unauthorized Access | 2,977 | Letter PDF |
| 2019/06.25 | 2019-0296 | Oklahoma Department of Securities | Hackers/Unauthorized Access | 1,028 | Letter PDF |
| 2019/06.13 | 2019-0297 | Mediant Communications Inc. | Hackers/Unauthorized Access | 1,774 | Letter PDF |
| 2019/03.15 | 2019-0117 | flexPATH Strategies | Hackers/Unauthorized Access | 1,573 | Letter PDF |
| 2018/11.08 | 2018-0599 | Thesy, LLC | Hackers/Unauthorized Access | 2,642 | Letter PDF |
| 2018/10.31 | 2018-0552 | Bankers Life | Hackers/Unauthorized Access | 4,328 | Letter PDF |
| 2018/07.25 | 2018-0314 | ComplyRight, Inc. | Hackers/Unauthorized Access | 3,747 | Letter PDF |
| 2018/05.30 | 2018-0303 | Global University | Hackers/Unauthorized Access | 1,333 | Letter PDF |
| 2018/05.18 | 2018-0206 | TaskRabbit, Inc. | Hackers/Unauthorized Access | 4,062 | Letter PDF |
| 2018/04.26 | 2018-0161 | Delta Air Lines, Inc. | Hackers/Unauthorized Access | 2,831 | Letter PDF |
| 2018/04.04 | 2018-0133 | Orbitz, LLC | Hackers/Unauthorized Access | 1,078 | Letter PDF |
| 2017/07.07 | 2017-0302 | Aqua-Aston Hospitality, LLC | Hackers/Unauthorized Access | 1,056 | Letter PDF |
| 2017/04.28 | 2017-0304 | Jackson Hewitt Tax Services, Inc. | Hackers/Unauthorized Access | 5,659 | Letter PDF |
| 2017/04.11 | 2017-0179 | Nutrex Hawaii, Inc. | Hackers/Unauthorized Access | 1,168 | Letter PDF |
| 2017/04.11 | 2017-0180 | Tempur-Pedic | Hackers/Unauthorized Access | 1,302 | Letter PDF |
| 2017/04.11 | 2017-0181 | Plow & Hearth | Hackers/Unauthorized Access | 1,834 | Letter PDF |
| 2017/03.09 | 2017-0118 | prAna | Hackers/Unauthorized Access | 1,553 | Letter PDF |
| 2017/01.19 | 2017-0034 | Spiraledge, Inc. | Hackers/Unauthorized Access | 1,823 | Letter PDF |
| 2016/08.22 | 2016-0445 | Active Outdoors | Hackers/Unauthorized Access | 3,984 | Letter PDF |
| 2016/05.11 | 2016-0247 | doTERRA International, LLC | Hackers/Unauthorized Access | 17,315 | Letter PDF |
| 2016/03.18 | 2016-0145 | BaileysOnline.com | Hackers/Unauthorized Access | 1,319 | Letter PDF |
| 2016/02.09 | 2016-0087 | Gyft, Inc. | Hackers/Unauthorized Access | 1,706 | Letter PDF |
| 2015/12.31 | 2016-0044 | Matson Navigation Company, Inc. | Stolen Laptops, Computers & Equipment | 1,150 | Letter PDF |
| 2015/11.12 | 2015-0692 | Digital Theatre, LLC | Hackers/Unauthorized Access | 1,453 | Letter PDF |
| 2015/10.12 | 2015-0631 | Scottrade | Hackers/Unauthorized Access | 32,778 | Letter PDF |
| 2015/09.29 | 2015-0605 | Costco Photo Center | Hackers/Unauthorized Access | 4,436 | Letter PDF |
| 2015/09.25 | 2015-0602 | Yapstone, Inc. | Hackers/Unauthorized Access | 3,486 | Letter PDF |
| 2015/09.03 | 2015-0543 | Hawaii First Federal Credit Union | Hackers/Unauthorized Access | 5,965 | Letter PDF |
| 2015/07.22 | 2015-0447 | UCLA Health Services | Hackers/Unauthorized Access | 5,446 | Letter PDF |
| 2015/07.09 | 2015-0419 | Automotive Recovery Services, Inc. dba Vehicle Donation Processing Center | Hackers/Unauthorized Access | 1,163 | Letter PDF |
| 2015/03.24 | 2015-0207 | Premera Blue Cross | Hackers/Unauthorized Access | 19,174 | Letter PDF |
| 2015/02.20 | 2015-0104 | Oahu Publications | Hackers/Unauthorized Access | 3,543 | Letter PDF |
| 2015/02.15 | 2015-0082 | Anthem, Inc. | Hackers/Unauthorized Access | 18,206 | Letter PDF |
| 2014/12.19 | 2014-1045 | IBEW, Local 1357 | Lost in Transit | 4,360 | Letter PDF |
| 2014/09.23 | 2014-0884 | Viator | Hackers/Unauthorized Access | 2,500 | Letter PDF |
| 2014/09.10 | 2014-0839 | The Home Depot, Inc. | Hackers/Unauthorized Access | Unknown | Letter PDF |
| 2014/07.29 | 2014-0767 | Time Northern Trust Company | Release/Display of Information | 1,267 | Letter PDF |
| 2014/02.27 | 2014-0113 | AIG Life and Retirement, The Variable Annuity Life Insurance Co. | Data Theft by Employee or Contractor | 4,015 | Letter PDF |
| 2014/01.25 | 2014-0039 | Neiman Marcus Group | Hackers/Unauthorized Access | 9,680 | Letter PDF |
| 2013/12.20 | 2014-0790 | Target Corporation | Hackers/Unauthorized Access | 121,000 | Letter PDF |
| 2013/12.13 | 2013-0775 | Maricopa Community College | Hackers/Unauthorized Access | 3,828 | Letter PDF |
| 2013/12.09 | 2013-0770 | J.P. Morgan Chase Bank, N.A. | Hackers/Unauthorized Access | 3,903 | Letter PDF |
| 2013/10.09 | 2013-0653 | Adobe Systems | Hackers/Unauthorized Access | 9,439 | Letter PDF |
| 2012/11.28 | 2012-1358 | State of South Carolina, Dept. of Revenue | Phishing | 2,394 | Letter PDF |
| 2012/02.21 | 2012-0353 | Trident University c/o Baker Hostetler, LLP | Hackers/Unauthorized Access | 1,423 | Letter PDF |
| 2011/04.19 | 2011-0599 | ABM Industries Incorporated | Stolen Laptops, Computers & Equipment | 1,523 | Letter PDF |
| 2011/03.17 | 2011-0545 | Health Net, Inc. | Lost in Transit | 1,175 | Letter PDF |
| 2011/01.03 | 2011-0153 | Pentagon Federal Credit Union | Hackers/Unauthorized Access | 2,916 | Letter PDF |
| 2010/01.05 | 2010-0017 | Lincoln Financial Advisors Corporation (LFA & LFS) | Hackers/Unauthorized Access | 2,100 | Letter PDF |
| 2009/08.05 | 2009-1374 | Network Solutions, Inc. | Hackers/Unauthorized Access | 2,350 | Letter PDF |
| 2008/10.14 | 2008-1040 | Wyndham Hotels and Resorts, LLC | Hackers/Unauthorized Access | 1,000 | Not available |
| 2008/06.27 | 2008-0755 | Punahou School | Stolen Laptops, Computers & Equipment | 2,067 | Not available |
| 2008/07.11 | 2008-0692 | 24 Hour Fitness USA, Inc. | Stolen Laptops, Computers & Equipment | 1,506 | Not available |
| 2008/06.26 | 2008-660 | National Western Life Insurance Company | Release/Display of Information | 1,011 | Not available |
| 2008/04.18 | 2008-0426 | Lending Tree | Data Theft by Employee or Contractor | 8,368 | Not available |
| 2007/12.27 | 2008-0002 | GE Money-Americas | Data Theft by Employee or Contractor | 1,181 | Not available |
| 2009/09.28 | 2007-1537 | Gap Inc. | Stolen Laptops, Computers & Equipment | 2,100 | Not available |
| 2007/09.14 | 2007-1357 | TD Ameritrade | Hackers/Unauthorized Access | 33,157 | Not available |
| 2007/07.13 | 2007-1017 | Walt Disney Company, The dba Buena Vista Catalogue Company | Data Theft by Employee or Contractor | 2,457 | Not available |
| 2007/07.04 | 2007-0991 | Fidelity National Information Services, Inc. dba FIS | Data Theft by Employee or Contractor | 6,000 | Not available |
| 2022/11.21 | 2023-0243 | Receivables Performance Management, LLC | Hackers/Unathorized Access | 8529 | Letter PDF |
| 2022/12.08 | 2023-0241 | Community Loan Servicing | Hackers/Unauthorized Access | 1447 | Letter PDF |
| 2023/01.27 | 2023-0245 | Sleep Center Hawaii | Hackers/Unauthorized Access | 5097 | Letter PDF |
| 2023/02.24 | 2023-0246 | Aloha Nursing Rehab Centre | Hackers/Unauthorized Access | 12096 | Letter PDF |
| 2023/05.17 | 2023-0662 | Sysco Corporation | Hackers/Unauthorized Access | 1,186 | Letter PDF |
| 2023/05.22 | 2023-0439 | NCB Management Services, Inc. | Hackers/Unauthorized | 4145 | Letter PDF |
| 2023/06.23 | 2023-0766 | Wilton Reassurance Company | Hackers/Unauthorized | 3528 | Letter PDF |
| 2023/06.26 | 2023-0760 | Talcott Resolution Life Insurance Company | Hackers/Unauthorized | 1802 | Letter PDF |
| 2023/07.02 | 2023-0777 | Genworth Financial, Inc. | Hackers/Unauthorized Access | 14407 | Letter PDF |
| 2023/07.25 | 2023-0828 | Transamerica Life Insurance Company | Hackers/Unauthorized | 2250 | Letter PDF |
| 2023/07.27 | 2023-0840 | Teachers Insurance and Annuity Association of America (TIAA) | Hackers/Unauthorized Access | 10322 | Letter PDF |
| 2023/07.28 | 2023-0857 | Milliman Solutions dba Milliman Intelliscript | Hackers/Unauthorized Access | 6,669 | Letter PDF |
| 2023/08.22 | 2023-0867 | Sun Life Assurance Company of Canada | Hacker/Unauthorized Access | 3,222 | Letter PDF |
| 2023/08.08 | 2023-0894 | Lumico Life Insurance Company / Elips Life Insurance Company | Hacker/Unauthorized Access | 1,006 | Letter PDF |
| 2023/08.14 | 2023-0895 | Corebridge Financial, INC | Hacker/Unauthorized Access | 27,651 | Letter PDF |
| 2023/08.01 | 2023-0897 | Progressive Casualty Insurance Company | Hacker/Unauthorized Access | 1,044 | Letter PDF |
| 2023/07.28 | 2023-0912 | Delaware Life Insurance Company | Hacker/Unauthorized Access | 2,013 | Letter PDF |
| 2023/08.29 | 2023-0949 | F21 OPCP LLC | Hacker/Unauthorized Access | 4,645 | Letter PDF |
| 2023/08.30 | 2023-0950 | Aloha Pacific Federal Credit Union | Hacker/Unauthorized Access | 5,409 | Letter PDF |
| 2023/08.07 | 2023-0985 | American National Group, LLC | Hacker/Unauthorized Access | 1,284 | Letter PDF |
| 2023/08.03 | 2023-0986 | Hartford Life and Accident Insurance Company | Hacker/Unauthorized Access | 1,796 | Letter PDF |
| 2023/08.11 | 2023-0994 | EP Global Production Solutions, LLC | Hacker/Unauthorized Access | 3,340 | Letter PDF |
| 2023/08.14 | 2023-1008 | CMFG Life Insurance Company / Members Life Insurance Company | Hacker/Unauthorized Access | 5,236 | Letter PDF |
| 2023/08.25 | 2023-1010 | Illumifin Corporation | Hacker/Unauthorized Access | 3,895 | Letter PDF |
| 2023/08.24 | 2023-1013 | Pension Benefit Information, LLC / Progress Software Corporation | Hacker/Unauthorized Access | 2,004 | Letter PDF |
| 2023/08.24 | 2023-1027 | The Global Atlanic Financial Group, LLC | Hacker/Unauthorized Access | 4,949 | Letter PDF |
| 2023/8.22 | 2023-0867 | Sun Life Assurance Company of Canada | Hackers/Unauthorized Access | 3,282 | Letter PDF |
| 2023/8.8 | 2023-0986 | Harford Life and Accident Insurance Company | Hackers/Unauthorized Access | 1,414 | Letter PDF |
| 2023/9.14 | 2023-1048 | Athene Annuity and Life Company | Hackers/Unauthorized Access | 1,068 | Letter PDF |
| 2023/9.15 | 2023-1078 | Massachusetts Mutual Life Insurance | Hackers/Unauthorized Access | 7,160 | Letter PDF |
| 2023/10.11 | 2023-1109 | Caesars Entertainment, Inc. | Hackers/Unauthorized Access | 165,271 | Letter PDF |
| 2023/8.26 | 2023-1058 | Maximus, Inc. | Hackers/Unauthorized Access | 2,807 | Letter PDF |
| 2023/11.3 | 2023-1113 | AlohaCare | Hackers/Unauthorized Access | 8,898 | Letter PDF |
| 2023/11.21 | 2023-1173 | NSC Technologies | Hackers/Unauthorized Access | 1,249 | Letter PDF |
| 2023/12.5 | 2024-0091 | Nationstar Mortgage (dba Mr. Cooper) | Hackers/Unauthorized Access | 55,958 | Letter PDF |
| 2023/12.22 | 2024-0108 | LoanCare, LLC (Fidelity National Financial, Inc.) | Hackers/Unauthorized Access | 3,732 | Letter PDF |