Data Breaches Reported to California Attorney General's Office in 2012

TYPE OF INFORMATION INVOLVED

Organization Name

Date(s) of Breach 12/15/12 12/11/12 12/10/12, 12/18/12

SSN

Driver License

Credit/ Debit Card

Bank Other Acct Financi

Health Info

Other

Sunview Vineyards of California, Inc. East San Gabriel Valley Regional Occupational Program

1 1

1 1 1 1 1 1 1 1 1 1

Calif. Department of Health Care Services 10/26/2012 Upper Skagit Indian Tribe 11/07/12, 12/05/12 Jetro/Restaurant Depot Western University of Health Sciences World Travel Holdings Library Systems & Services, LLC Yolo Federal Credit Union
11/14/12 10/31/12 10/27/12, 10/28/12, 10/29/12, 10/30/12, 10/31/12, 11/1/12, 11/2/12, 11/3/12, 11/4/12, 11/5/12, 11/6/12, 11/7/12 12/1/12 7/19/12 11/1/10

MT. DIABLO UNIFIED SCHOOL DISTRICT Wilton Brands LLC American Express Travel Related Services Company, Inc and/or its affiliates ('AXP')* Pepperdine University South Carolina Department of Revenue, c/o Jon Neiditz, Nelson Mullins Riley & Scarborough Accume Partners Pinkerton Government Services, Inc. California Department of Health Care Services

1 1 1

11/11/12 9/1/12, 9/15/12

1 1

10/31/12 11/15/12 11/5/12

1 1 1 1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 11/20/12 WestCoast Children's Clinic 6/15/12, 10/1/12 Advanced Data Processing, Inc. 10/1/11, 3/31/12 Oak River Insurance Company
8/3/12

1 1 1 1

1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)*

Page 1 of 6

Data Breaches Reported to California Attorney General's Office in 2012

TYPE OF INFORMATION INVOLVED

Organization Name

Date(s) of Breach 5/21/12

SSN

Driver License

Credit/ Debit Card

Bank Other Acct Financi

Health Info

Other

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 8/1/12 American Tool Supply Nationwide Mutual Insurance Company Sprechman & Associates, P.A. Alere Home Monitoring, Inc. National Processing Company, Inc. American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)*
10/3/12 9/23/12 11/6/11

1 1 1 1 1 1 1 1 1 1

1 American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* California Department of Corrections and Rehabilitation HSBC Bank USA National Association Kaiser Permanente Barnes & Noble Booksellers, Inc. Philip P Corneliuson L.A. Care Health Plan Korn/Ferry American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* TD Bank, N.A. Monterey Institute of International Studies Apria Healthcare, Inc. Transcend Capital LLC St. Therese Medical Group California Correctional Healthcare Services American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)*
2/2/12

9/26/12 7/27/12 8/24/12 9/15/12 9/17/12, 9/18/12, 9/19/12, 9/20/12

1 1 1 1 1 1 1 1 1 1 1 1

3/30/12 9/14/12 6/14/12 8/20/12 7/22/12 6/20/12 4/2/12

1 1 1 1 1 1

1 1

1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)*

Page 2 of 6

Data Breaches Reported to California Attorney General's Office in 2012

TYPE OF INFORMATION INVOLVED

Organization Name

Date(s) of Breach

SSN

Driver License

Credit/ Debit Card

Bank Other Acct Financi

Health Info

Other

Local 2/Hospitality Industry Child & Elder 8/13/12 Care Plan CARMICHAEL COMPANY Healing Touch Day Spa 8/28/12 Inc./Whatgreatskin.com 5/23/12 Nebraska State College System
4/1/12

1 1 1 1 1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 1 American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 8/3/12 Churchill Downs Technology Initiatives Company dba TwinSpires
4/2/12

1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 8/13/12 The John Stewart Company State Farm Insurance Companies
7/28/12 4/2/12

1 1 1

American Express Travel Related Services Company, Inc and/or its Affiliates (AXP)* 7/26/12 Bellacor.com, Inc. Discover Financial Services* 6/14/12 Apria Healthcare, Inc.
3/2/12

1 1 1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 8/2/12 First Republic Bank Stanford Hospital & Clinics and School of 8/15/12 Medicine 6/11/12 Privacy Office, California Correctional Health Care Services (CCHCS) Nordstrom fsb Ameritas LIfe Insurance Corp. Massachusetts Mutual Life Insurance Company Comerica Bank Petco Animal Supplies, Inc. Mission Linen Supply Company
6/7/12 3/22/12 7/13/12

1 1 1

1 1 1 1 1 1

5/18/12 6/29/12

Page 3 of 6

Data Breaches Reported to California Attorney General's Office in 2012

TYPE OF INFORMATION INVOLVED

Organization Name

Date(s) of Breach

SSN

Driver License

Credit/ Debit Card

Bank Other Acct Financi

Health Info

Other

1 American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 4/23/12, 5/28/12 American Pharmacists Association
6/26/12

1 1

American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* 5/18/12 River Arch Dental American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)*

1 1

1 American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* Scripps College American Express Travel Related Services Company, Inc and /or its Affiliates (AXP)* Global Payments Inc. 4/9/11, 6/12/12 ThePartsBin.com (U.S. Auto Parts Network, Inc.) University of Southern California 5/22/12, 5/30/12 Gotickets, Inc. 5/6/12, 5/10/12 Discover Financial Services* Postcard Press, Inc. d/b/a Next Day Flyers 5/8/12 Department of Public Health 11/29/11 Investacorp, Inc.
1/2/12, 2/25/12

1 1

1 1 1 1 1 1

1 1 1 1

Bank of America Merchant Services, LLC First Republic Bank Discover Financial Services* Discover Financial Services* Altrec, Inc. Discover Financial Services* Emory Healthcare, Inc. St Mary Medical Center California Department of Social Services

1/21/12

3/22/12, 4/0/12, 4/13/12, 4/17/12, 4/26/12, 5/15/12 2/20/12 5/7/12

1 1 1 1 1 1 1 1

Page 4 of 6

Data Breaches Reported to California Attorney General's Office in 2012

TYPE OF INFORMATION INVOLVED

Organization Name

Date(s) of Breach

SSN

Driver License

Credit/ Debit Card

Bank Other Acct Financi

Health Info

Other

1 University of North Carolina at Charlotte First Data California Department of Justice / CATCH Incorporating Services, Ltd. Choice Hotels International Rent-A-Center, Inc. Indie Research LLC Desert AIDS Project Cigna Dental Kern Medical Center KAISER PERMANENTE Perry Dental X-Rite Incorporated Pono Products, Inc. dba reuseit.com Union Bank N.A. State Farm Insurance Companies Manhattan Prep Opening Ceremony Online LLC UnitedHealth Group health plan single affiliated covered entity State of California, Department of Child Support Services San Francisco Head Start, San Francisco State University St. Joseph's Medical Center Sacramento Area Fire Fighters, Local 522 Rubio's Restaurants, Inc. Kaiser Foundation Health Plan LPL Financial Trident University International RJL Insurance Services DHI Mortgage Company, Ltd., LP Impairment Resouces, LLC Valve Corporation IndyMac Resources, Inc. TM Acquisition LLC (d/b/a Trymedia) Regions Financial Corporation 1 1
4/2/12 4/1/12 4/3/12, 4/7/12 4/12/12 3/23/12 2/25/12 4/6/12 2/16/12 2/6/12 8/22/11 1/31/12 n/a 3/25/12 2/14/12 6/28/11, 12/12/11 3/12/12 8/1/11, 11/30/11 2/2/12, 3/16/12

1 1 1

1 1

1 1 1

1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1

2/5/12 9/26/11 2/6/12 11/26/11 10/1/11 2/10/12 12/31/11

1 1 1 1 1 1 1

12/8/11

Page 5 of 6

Data Breaches Reported to California Attorney General's Office in 2012

TYPE OF INFORMATION INVOLVED

Organization Name

Date(s) of Breach 1/5/12

SSN

Driver License

Credit/ Debit Card

Bank Other Acct Financi

Health Info

Other

New York State Electric & Gas (NYSEG) and Rochester Gas and Electric (RG&E) (subsidiaries of Iberdrola USA) Pacifica-Coastside Credit Union / SF Fire Credit Union

12/29/11

*Breach occurred at retailer or payment card processor.

Page 6 of 6