How sweet it isn’t: Godiva notifies employees that stolen laptop held their data

Godiva Choclatier is notifying an undisclosed number of employees that their personal information was on a laptop stolen from a human resources employee’s car:

On October 16, 2014, we learned that a suitcase was stolen from a rental car that a human resources employee was using to visit Godiva’s retail stores that day. The suitcase contained the employee’s personal items and the laptop provided to the employee by Godiva. Once the employee discovered that the suitcase was missing from the car, law enforcement and Godiva were immediately notified. Godiva immediately began an investigation to determine what information was contained on the laptop. A password is required to log-in to the laptop, but the hard drive was not encrypted.

Godiva submitted three templates for their notifications to the California Attorney General’s Office because for some employees, their  name, address, and Social Security number were involved, while for other employees, their name, address, driver’s license number and Social Security number were involved. Yet other employees were notified that their name, address, medical diagnosis for work restrictions and Social Security number were involved.

All affected employees were offered a year of free credit report monitoring and protection with Experian ProtectMYID service.

About the author: Dissent