DisclosureLens
MisuseInformationIdentity (basic)CredentialsLowContained

Sprint Nextel

bd_fdee0acc84359686 · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Mar 30, 2009

To disclose

Affected

4state residents only

Confidence

67%
Full breach record for Sprint Nextel5 incidents on file

Sprint Nextel notified the New Hampshire Attorney General of a security breach involving an employee at its Ft. Lauderdale, Florida customer care center. Acting outside their authority, the employee accessed multiple customer accounts and provided information to a third party, potentially to facilitate handset theft. The employee was terminated. Approximately 4 New Hampshire residents were affected. Compromised data included names, addresses, phone numbers, account numbers, and security question answers. No SSNs or payment info were accessed. Notification to customers occurred on February 27, 2009.

Incident timeline

Dec 1, 2008

Begins

Mar 30, 2009

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.