Security Breach Notices

Any business or government agency that owns or licenses personal information of residents of Hawaii is obligated to give written notice of security breaches to the Office of Consumer Protection (OCP) when one-thousand (1000) or more Hawaii residents are affected by the security breach. § 487N-2(f), Hawaii Revised Statutes.

The table below lists OCP cases where a business or government agency reported a security breach, where one-thousand or more Hawaii residents were affected. The OCP categorizes security breaches by type (in order of frequency): Hackers/Unauthorized Access; Stolen Laptops, Computers & Equipment; Release/Display of Information; Data Theft by Employee or Contractor; Lost in Transit; and Phishing.

Date NotifiedCase NumberBreached Entity NameBreach typeHawaii Residents ImpactedLink to Letter
2021/07.082021-1070Arthur J. Gallagher & Co.Hackers/Unauthorized Access2,345Letter PDF
2021/10.042021-0798University Medical Center of Southern NevadaHackers/Unauthorized Access5,798Letter PDF
2021/09.302021-0893Neiman Marcus Group, LLCHackers/Unauthorized Access19,070Letter PDF
2021/09.032021-0725Hawaiian Dredging Construction CompanyHackers/Unauthorized Access3,756Letter PDF
2021/01.142021-0082National Western Life Insurance CompanyHackers/Unauthorized Access8,373Letter PDF
2021/04.232021-0278Foodland Super MarketHackers/Unauthorized Access35,963Letter PDF
2021/03.312021-0305Med-Data IncorporatedHackers/Unauthorized Access1,396Letter PDF
2021/03.152021-0266Flagstaff BankHackers/Unauthorized Access3,494Letter PDF
2021/06.222021-0401Hawaii Payroll Services, LLC Hackers/Unauthorized Access4,500Letter PDF
2021/06.182021-0518Herff Jones, LLC Hackers/Unauthorized Access3,373Letter PDF
2021/06.122021-0519Atlas Insurance Agency, Inc.Hackers/Unauthorized Access1,652Letter PDF
2021/06.102021-0359Volkswagen Group of AmericaHackers/Unauthorized Access6,261Letter PDF
2021/01.142021-0087Waters & Kraus LLPHackers/Unauthorized Access1,339Letter PDF
2020/12.312021-0041Zoetop Business Co. Ltd dba www.romwe.comHackers/Unauthorized Access30,382Letter PDF
2020/08.242021-0211Arbiter Sports, LLCHackers/Unauthorized Access1,223Letter PDF
2020/04.202020-0196Volusion, LLCHackers/Unauthorized Access1,480Letter PDF
2019/12.202019-0554Jambav, Inc. ("ToonDoo")Hackers/Unauthorized Access7,173Letter PDF
2019/09.132019-0436Amateur Athletic UnionHackers/Unauthorized Access2,977Letter PDF
2019/06.252019-0296Oklahoma Department of SecuritiesHackers/Unauthorized Access1,028Letter PDF
2019/06.132019-0297Mediant Communications Inc.Hackers/Unauthorized Access1,774Letter PDF
2019/03.152019-0117flexPATH StrategiesHackers/Unauthorized Access1,573Letter PDF
2018/11.082018-0599Thesy, LLCHackers/Unauthorized Access2,642Letter PDF
2018/10.312018-0552Bankers LifeHackers/Unauthorized Access4,328Letter PDF
2018/07.252018-0314ComplyRight, Inc.Hackers/Unauthorized Access3,747Letter PDF
2018/05.302018-0303Global UniversityHackers/Unauthorized Access1,333Letter PDF
2018/05.182018-0206TaskRabbit, Inc.Hackers/Unauthorized Access4,062Letter PDF
2018/04.262018-0161Delta Air Lines, Inc.Hackers/Unauthorized Access2,831Letter PDF
2018/04.042018-0133Orbitz, LLCHackers/Unauthorized Access1,078Letter PDF
2017/07.072017-0302Aqua-Aston Hospitality, LLCHackers/Unauthorized Access1,056Letter PDF
2017/04.282017-0304Jackson Hewitt Tax Services, Inc.Hackers/Unauthorized Access5,659Letter PDF
2017/04.112017-0179Nutrex Hawaii, Inc.Hackers/Unauthorized Access1,168Letter PDF
2017/04.112017-0180Tempur-PedicHackers/Unauthorized Access1,302Letter PDF
2017/04.112017-0181Plow & HearthHackers/Unauthorized Access1,834Letter PDF
2017/03.092017-0118prAnaHackers/Unauthorized Access1,553Letter PDF
2017/01.192017-0034Spiraledge, Inc.Hackers/Unauthorized Access1,823Letter PDF
2016/08.222016-0445Active OutdoorsHackers/Unauthorized Access3,984Letter PDF
2016/05.112016-0247doTERRA International, LLCHackers/Unauthorized Access17,315Letter PDF
2016/03.182016-0145BaileysOnline.comHackers/Unauthorized Access1,319Letter PDF
2016/02.092016-0087Gyft, Inc.Hackers/Unauthorized Access1,706Letter PDF
2015/12.312016-0044Matson Navigation Company, Inc.Stolen Laptops, Computers & Equipment1,150Letter PDF
2015/11.122015-0692Digital Theatre, LLCHackers/Unauthorized Access1,453Letter PDF
2015/10.122015-0631ScottradeHackers/Unauthorized Access32,778Letter PDF
2015/09.292015-0605Costco Photo CenterHackers/Unauthorized Access4,436Letter PDF
2015/09.252015-0602Yapstone, Inc.Hackers/Unauthorized Access3,486Letter PDF
2015/09.032015-0543Hawaii First Federal Credit UnionHackers/Unauthorized Access5,965Letter PDF
2015/07.222015-0447UCLA Health ServicesHackers/Unauthorized Access5,446Letter PDF
2015/07.092015-0419Automotive Recovery Services, Inc. dba Vehicle Donation Processing CenterHackers/Unauthorized Access1,163Letter PDF
2015/03.242015-0207Premera Blue CrossHackers/Unauthorized Access19,174Letter PDF
2015/02.202015-0104Oahu PublicationsHackers/Unauthorized Access3,543Letter PDF
2015/02.152015-0082Anthem, Inc.Hackers/Unauthorized Access18,206Letter PDF
2014/12.192014-1045IBEW, Local 1357Lost in Transit4,360Letter PDF
2014/09.232014-0884ViatorHackers/Unauthorized Access2,500Letter PDF
2014/09.102014-0839The Home Depot, Inc.Hackers/Unauthorized AccessUnknownLetter PDF
2014/07.292014-0767Time Northern Trust CompanyRelease/Display of Information1,267Letter PDF
2014/02.272014-0113AIG Life and Retirement, The Variable Annuity Life Insurance Co.Data Theft by Employee or Contractor4,015Letter PDF
2014/01.252014-0039Neiman Marcus GroupHackers/Unauthorized Access9,680Letter PDF
2013/12.202014-0790Target CorporationHackers/Unauthorized Access121,000Letter PDF
2013/12.132013-0775Maricopa Community CollegeHackers/Unauthorized Access3,828Letter PDF
2013/12.092013-0770J.P. Morgan Chase Bank, N.A.Hackers/Unauthorized Access3,903Letter PDF
2013/10.092013-0653Adobe SystemsHackers/Unauthorized Access9,439Letter PDF
2012/11.282012-1358State of South Carolina, Dept. of RevenuePhishing2,394Letter PDF
2012/02.212012-0353Trident University c/o Baker Hostetler, LLPHackers/Unauthorized Access1,423Letter PDF
2011/04.192011-0599ABM Industries IncorporatedStolen Laptops, Computers & Equipment1,523Letter PDF
2011/03.172011-0545Health Net, Inc.Lost in Transit1,175Letter PDF
2011/01.032011-0153Pentagon Federal Credit UnionHackers/Unauthorized Access2,916Letter PDF
2010/01.052010-0017Lincoln Financial Advisors Corporation (LFA & LFS)Hackers/Unauthorized Access2,100Letter PDF
2009/08.052009-1374Network Solutions, Inc.Hackers/Unauthorized Access2,350Letter PDF
2008/10.142008-1040Wyndham Hotels and Resorts, LLCHackers/Unauthorized Access1,000Not available
2008/06.272008-0755Punahou SchoolStolen Laptops, Computers & Equipment2,067Not available
2008/07.112008-069224 Hour Fitness USA, Inc.Stolen Laptops, Computers & Equipment1,506Not available
2008/06.262008-660National Western Life Insurance CompanyRelease/Display of Information1,011Not available
2008/04.182008-0426Lending TreeData Theft by Employee or Contractor8,368Not available
2007/12.272008-0002GE Money-AmericasData Theft by Employee or Contractor1,181Not available
2009/09.282007-1537Gap Inc.Stolen Laptops, Computers & Equipment2,100Not available
2007/09.142007-1357TD AmeritradeHackers/Unauthorized Access33,157Not available
2007/07.132007-1017Walt Disney Company, The dba Buena Vista Catalogue CompanyData Theft by Employee or Contractor2,457Not available
2007/07.042007-0991Fidelity National Information Services, Inc. dba FISData Theft by Employee or Contractor6,000Not available