Data Breach Reporting Requirements
These United States?
| Virginia |
| New York |
| Michigan |
| Massachusetts |
| Indiana |
| Source: Imation's Heat index map; does not include four US states with no notification requirements |
| US Virgin Islands |
| North Dakota |
| Mississippi |
| Montana |
| Nebraska |
| Source: Imation's Heat index map; does not include four US states with no notification requirements |
European Disunion
Top Data Breaches – All Time (no. of records)*
| 1. Shanghai Roadway D&B Marketing Services (150 million) |
| 2. Heartland Payment Systems (130 million) |
| 3. TJX Companies (94 million) |
| 4. TRW, Sears Roebuck (90 million) |
| 5. Sony Corporation (77 million) |
| 6. Tianya (40 million)/Tianya (40 million) |
| 7. Steam [Valve Inc.] (35 million)/SK Communications (35 million) |
| 8. Rock You Inc (32 million) |
| 9.US Dept of Veterans Affairs (26.5 million) |
| *List includes only individual incidents with a confirmed no. of disclosed records |
| Source: Open Security Foundation, datalossdb.org |
Most Significant Data Breaches*
| 1. RSA's SecurID (2011) |
| 2. Heartland Payment Systems (2009) |
| 3. HM Revenue and Customs (2007) |
| 4. Sony Corporation (2011) |
| 5. Epsilon (2011) |
| *As rated by impact poll of Infosecurity's editors and Editorial Advisory Board |
Global Reported Data Breach Incidents by Sector



