Apple Inc.

Apple, Inc. notified the New Hampshire Attorney General that an AppleCare vendor employee unauthorizedly viewed a customer's payment card information on October 17, 2024. Apple discovered the incident on October 30, 2024, terminated the vendor employee, and mailed notification to the single affected individual on November 4, 2024, offering credit monitoring services.

Apple Inc. notified the New Hampshire Attorney General of an incident affecting one resident. An unauthorized purchase was made using a customer's payment card by a Sales Specialist employed by a third-party service provider. The incident occurred on April 3, 2023, and was discovered on June 20, 2023. The employee was suspended and removed. The affected individual received one year of credit monitoring.

An insider at Apple Inc. was responsible for a data breach that affected one Maine resident. The breach, which occurred in November 2021 and was discovered in February 2022, resulted in the compromise of financial account numbers or credit/debit card numbers. Apple Inc. offered 12 months of identity theft protection services to the affected individual.

Apple Inc. reported a data breach resulting from insider wrongdoing, which occurred on November 29, 2021, and was discovered on February 1, 2022. The breach affected one Maine resident. The compromised information included names and financial account or card numbers along with access codes. Apple offered one year of complimentary identity theft protection services through Kroll to the affected individual.

Apple Inc. reported a data breach affecting one Maine resident, caused by insider wrongdoing. The breach, which occurred on November 29, 2021, and was discovered on February 3, 2022, resulted in the compromise of a financial account or credit/debit card number. The company offered 12 months of identity monitoring services to the affected individual.

Apple Valley Clinic reported to HHS on 2021-03-26 a Hacking/IT Incident affecting 157,939 individuals. Breached information located on Network Server. A business associate was the victim of a cyber-attack compromising PHI (names, addresses, DOB, SSN, driver's license, claims, diagnoses, lab results, medication). The clinic offered credit monitoring, implemented technical safeguards, and terminated the BA relationship.

Apple America Group LLC reported that an outside consultant lost a USB flash drive containing employee W-2 information (name, address, SSN, wage/tax data) on March 3, 2015. The drive was lost while traveling. No evidence of misuse exists. Credit monitoring was offered to affected employees.