2010 — Lincoln National Corporation: Jan 2010 (vulnerability reported Aug 2009), 1.2M records
Data compromised
Names, SSNs, account numbers, balances, DOB, emails
Technical writeup
Jan 2010 (vulnerability reported Aug 2009). Shared usernames/passwords for portfolio system (Lincoln Financial Securities, Lincoln Financial Advisors). Six shared credentials created as early as 2002. Exposed: names, SSNs, account numbers, balances, DOB, emails. Kroll forensic; no evidence of external misuse. Discontinued shared credentials; offered credit monitoring.
Root cause
Shared credentials; policy violations by employees/vendors.