2008 GE Money — 650K customers (J.C. Penney)
Data compromised
Credit card information, Social Security numbers (150K)
Technical writeup
Backup tape missing October 2007 from Iron Mountain. Data for J.C. Penney and ~100 retailers. Offered 12 months credit monitoring.
Root cause
Lost/stolen media - backup tape missing from Iron Mountain