2005 — Citigroup: Blame the messenger, 3.9M records
Technical writeup
Blame the messenger! A box of computer tapes containing information on 3.9 million customers was lost by United Parcel Service (UPS) while in transit to a credit reporting agency.
Root cause
Lost / stolen device