PhysicalHealthcareHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPIIHighActive

BAXTER INTERNATIONAL INC.

bd_8d81f06b7027fe57 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Jul 11, 2008

To disclose

—

Affected · nationwide

6,9002 in this filing

Confidence

66%

Full breach record for BAXTER INTERNATIONAL INC. →4 incidents on file

Baxter International reported the theft of a laptop containing personal information (names, SSNs, addresses) of approximately 6,900 current, former, and prospective U.S. employees. The theft occurred on June 24, 2008, in Chicago, Illinois. Baxter notified the NH Attorney General on July 11, 2008, and began notifying affected employees on July 14, 2008. Response actions included engaging law enforcement, retaining Kroll for credit monitoring and identity theft services, and forming an Information Security Assessment Team.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 24, 2008

Begins

Jul 11, 2008

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6,900 affectedView incident

Name: BAXTER INTERNATIONAL INC.
norm: baxter international

Name: BAXTER INTERNATIONAL INC.
norm: baxter international
Industry: Healthcarellm

Discovered: —
Breach occurred: Jun 24, 2008
Materiality determined: —
Notification sent: Jul 14, 2008
Affected individuals: 6,900state + nationwide
Data types: Identity (basic)Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Notified and is working closely with local law enforcement officials to investigate this matter
Developing policies and procedures to strengthen our data security policies
Notifying employees whose information may have been or may be compromised
Working with law enforcement to assist them in identifying the thief and recovering the stolen laptop
Retained Kroll Inc. to provide 10 TheftSmart safeguards
Established a bilingual support center
Providing 24-months of credit monitoring services
Arranged for idINTEGRITY scan
Formed an Information Security Assessment Team to assess data security controls
Changes made: Restricting data access
Requiring the use of encryption tools
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/baxter-20080711.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2008
Raw hash: 22522e05b9e4d853092a622b39d795b61469964457c498d1f35773efaf812086

Reporting entityBAXTER INTERNATIONAL INC.

Victim entityBAXTER INTERNATIONAL INC.

IncidentUnauthorized Access

Stated responseNotified and is working closely with local law enforcement officials to investigate this matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov