2013 — Gap: A customer received a package from Banana Republic…
Data compromised
Personal information
Technical writeup
A customer received a package from Banana Republic that contained documents with employee Social Security numbers, tax forms, resignation letters, legal notices, doctors' notes, and performance reviews. The package was meant for HR administration and contained the information of around 20 sales support associates who work at Gap. The customers were expecting a tie and pocket square. it appears that the package had been mislabeled.
Root cause
Unintended disclosure