<<

Insured Profile Report – Cyber Liability Focus

Facebook, Inc. ______

Company Profile

Location 1601 S California Ave Palo Alto, CA www..com Company Type Private

Formerly Known As N/A

SIC Code 7374 SIC Code Description Computer Processing And Data Preparation And Processing Services Established N/A

Sales (in millions) $1,860.00 Employees 1800

Total OSHA Violations N/A

OSHA is an arm of the Department of Labor that conducts inspections of company facilities with the goal of preventing work-related injuries, illnesses and deaths. Worksites that do not meet health and/or safety standards at the time of inspection may Credit Details receive an OSHA violation. Total FDA NDC Drugs N/A Number of Legal Derogatory Not covered by Experian Items The total number of FDA Drugs filed in the FDA NDC Drug Database. Liability Amount Not covered by Experian Business Description Facebook, Inc. operates as a social networking Website. It enables Experian Intelliscore Not covered by Experian members to look up friend's Web pages, as well as share photos and videos. The company also provides messaging services among its users, Experian Credit Rating Not covered by Experian as well as mobile applications for Java-powered feature phones. Facebook, Inc. has a strategic alliance with The Nielsen Company. The Experian Intelliscore Percentile Not covered by Experian company was founded in 2004 and is based in Palo Alto, California with sales offices in Hong Kong and Singapore.

Experian Commercial IntelliscoreSM is an all-industry commercial model Top Competitors in the Country using business information to predict business risk. Its predictiveness is Company Name Sales Employees among the best on the market today (in millions) - Predicts the likelihood of accounts experiencing seriously derogatory payment performance in the next 12 months Deltanet, Inc $8,000.000 2952 - Produce scores ranging from 0 to 100, where high scores equal low risk - Based on past credit behavior, including payment behavior, balance A C S Shared Services Inc $4,351.000 52000 information,amount of trade activity, public record incidence and business size Newsletters.com $3,000.000 15 - Liability amount is the total dollar amount of debtor’s legal liability, including accounts in collection, tax liens, judgments and/or bankruptcies Insurity Solutions, Inc. $2,000.000 6720 - The total derogatory items are the sum of Tax-Lien Count, Bankruptcy, Horsemans Guarantee Corp Of $2,000.000 1500 Judgment, Collection-Counter and UCC Derog America Facebook, Inc. $1,860.000 1800

350 Nice $864.467 10017

Healthserve, LLC $546.918 56

EDS PLM Solutions Inc. $525.856 475

Triplex Direct Marketing Corp. $500.000 3401

Bbs Services Inc $499.000 10

Key Personnel Name Age Title Officer Since Donald E. Graham Board Member N/A

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 1

James W. Breyer 50 Board Member N/A Mr. James W. Breyer is Presiding Independent Director of Wal-Mart Stores Inc. Mr. Breyer is a Partner of Accel Partners, a firm, and has been an investor in numerous consumer , media, and technology companies, many of which have completed public offerings or mergers. He has served as a director of Dell Inc. since 2009. He also served as a director of Marvel Entertainment, Inc. from 2006 to 2009, and RealNetworks, Inc. from October 1995 to June 2008. He also serves as a director of several private companies and on the boards of various non-profit organizations. Mr. Breyer has been a member of the Board since 2001. Mr. Breyer's qualifications to serve on the Board include his experience gained through his venture capital activities, including his partnership in Accel Partners, through which he brings to the Board insight into strategic planning, investment, and entrepreneurship. The Board also benefits from Mr. Breyer's knowledge of the technology industry and insight into existing and emerging technologies relevant to 's business. In addition, through his years of service on the boards of public and private companies and other organizations, including his service on the Board and the SPFC, Mr. Breyer provides the Board with diverse and financial, operational, and leadership. David Sze Board Member N/A

Paul Madera Board Member N/A

Peter Thiel Board Member N/A

Marc Andreessen Board Member N/A

Reed Hastings Director N/A

Erskine Bowles Director N/A

Mark Zuckerberg Chief Executive Officer N/A is the CEO of Facebook, which he founded in 2004. Facebook is a social utility that helps people communicate more efficiently with their friends, families and coworkers. Mark is responsible for setting the overall direction and product strategy for the company. He leads the design of Facebook's service and development of its core technology and infrastructure. Mark attended Harvard University and studied computer science before moving the company to Palo Alto, California. Chief Operating Officer N/A Sheryl Sandberg is Chief Operating Officer at Facebook. She oversees the company's business operations including sales, marketing, business development, human resources, public policy and communications. Prior to Facebook, Sheryl was Vice President of Global Online Sales and Operations at , where she built and managed the online sales channels for advertising and publishing and operations for consumer products worldwide. She was also instrumental in launching Google.org, Google s philanthropic arm. Before Google, Sheryl served as Chief of Staff for the Treasury Department under President Bill Clinton where she helped lead the Treasury s work on forgiving debt in the developing world. Earlier, she was a management consultant with McKinsey & Company and an economist with the World Bank. Sheryl received a B.A. summa cum laude in Economics from Harvard University and was awarded the John H. Williams Prize for the top graduating student in economics. She received an MBA with highest distinction from the Harvard Business School. Sheryl serves on the boards of The Walt Disney Company, Starbucks, Women for Women International, the Center for Global Development and V-Day. Sheryl was named as one of the 50 Most Powerful Women in Business by Fortune and one of the 50 Women to Watch by . Christopher Cox Vice President N/A Christopher Cox is the Vice President of Product at Facebook, where he is responsible for organizing Facebook's product strategy and overseeing the product management and design functions. Christopher joined Facebook in 2005 as a Software Engineer and was instrumental in implementing first versions of key Facebook features, including and Inbox. He then became Director of Human Resources where he drove the development of Facebook s mission, values, and people strategy. Christopher holds a Bachelor's degree in Symbolic Systems with a concentration in from . David Fischer Vice President N/A David Fischer is the Vice President of Advertising and Global Operations at Facebook and oversees sales, advertiser marketing, and customer operations throughout the world. He joined Facebook after over seven years at Google, where he was Vice President of Global Online Sales and Operations and was responsible for Google's online sales channel, which represents the majority of Google s customers worldwide. In that role, he helped build Google's online advertising network into the largest in the world. Prior to that, David served as Deputy Chief of Staff at the United States Treasury Department during the Clinton Administration. Earlier, David was an Associate Editor at U.S. News & World Report, where he covered economics, business, and politics from Washington DC. David holds a Bachelor s degree in Government from Cornell University and a MBA from Stanford University. He serves on the boards of the SEEP Network, a global non-profit dedicated to microfinance and enterprise development. Lori Goler Vice President N/A Lori Goler is the Vice President of Human Resources and Recruiting and is responsible for all aspects of Facebook s people strategy including growing, developing and retaining the Facebook team. Lori joined Facebook following five years at eBay, where she led consumer marketing with responsibility for marketing strategy, brand management, advertising, and consumer promotions. While there, she also served as General Manager of the eBay Stores business. Lori was a founding member of the executive team at babystyle.com where she led operations and merchandising. In that role, she led the roll-out of babystyle.com which became a leading online retailer in the category. Lori started her career at The Walt Disney Company focused on strategy and business planning for the consumer products businesses. Lori holds a Bachelor s degree from Yale University, a MBA from Harvard Business School and a Master s degree in Public Policy from the Kennedy School of Government. Vice President N/A Mike Schroepfer is the Vice President of Engineering at Facebook. Mike leads the company's engineers who write the code used by hundreds of millions of people each day. Before Facebook, Mike was the Vice President of Engineering at Mozilla Corporation, where he led the global and open product development process behind . Mike was formerly a distinguished engineer at Sun Microsystems which acquired his company, CenterRun. He began his career working at various start-ups including a digital effects software startup, where software that Mike built was used in several major motion pictures. Mike holds a bachelor's degree and a master's degree in computer science from Stanford University and has filed two U.S. patents. Dan Rose Vice President N/A

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 2

Dan Rose is VP of Partnerships and Platform Marketing at Facebook. Dan is responsible for Facebook s worldwide business development and &A activities, and he leads product marketing and partnerships for and Credits. Dan joined Facebook in 2006 after seven years at Amazon.com where he held various positions in business development and general management, including his last role where he helped incubate and develop the Amazon Kindle. Dan earned a Bachelor s degree at Harvard University and attended the University of Michigan Business School for one year before joining Amazon. Dan currently sits on the board of Borders Group, Inc. David A. Ebersman Chief Financial Officer N/A is the Chief Financial Officer of Facebook, where he leads the finance and facilities teams. Prior to joining Facebook in 2009, David worked at Genentech Inc., a leading biotechnology company, most recently as its Chief Financial Officer and Executive Vice President. David joined Genentech in 1994 and served in a number of roles at the company including Senior Vice President, Product Operations, Vice President, Product Development, and Director, Business Development. Prior to Genentech, David worked as a Research Analyst at Oppenheimer & Company Inc. He serves on the Board of Directors at Ironwood Pharmaceuticals, and was selected as a Fellow in the Henry Crown Fellowship Program. David holds a Bachelor's in Economics and International Relations from Brown University. General Counsel N/A Ted Ullyot is Vice President and General Counsel at Facebook, where he leads the company's legal team. Ted was formerly a litigation partner in the Washington, DC office of Kirkland & Ellis LLP. Before his time with Kirkland, Ted was EVP and General Counsel of ESL Investments, Inc., a private investment firm. Earlier, he was SVP and General Counsel of AOL Time Warner Europe. Ted has also held a number of appointed positions in the Federal government, including serving in the White House as a Deputy Assistant to President George W. Bush, and at the Justice Department as Chief of Staff. He began his career as a law clerk for U.S. Supreme Court Justice Antonin Scalia. Ted holds a Bachelor s degree from and a JD from the University of Chicago Law School. VP, Marketing/Sales N/A Elliot Schrage is the Vice President of Global Communications, Marketing and Public Policy, where he is responsible for developing and coordinating key messages about products, corporate business and partnerships. He also oversees the company's public policy strategy worldwide. Elliot joined Facebook from Google, where he was the Vice President of Communications and Public Affairs. He helped broaden and coordinate the company's messaging from a focus on product PR to include all aspects of corporate, financial, policy, philanthropic and internal communications. Prior to Google, Elliot was the Bernard L. Schwarz Senior Fellow in business and foreign policy at the New York-based Council on Foreign Relations. Earlier in his career, Elliot served as the Senior Vice President of Global Affairs for Gap Inc. and an adjunct professor at and Columbia Law School. He has been a contributor to the Harvard Business Review and the . Elliot holds a Bachelor's degree from Harvard University, a Master's degree in Public Policy from the Kennedy School of Government and a JD from . Founder N/A Dustin Moskovitz is a co-founder of Facebook and was a key leader within the technical staff. He most recently worked on the company's internal tools strategy and development. Dustin attended Harvard University as an Economics major for two years before moving to Palo Alto, California to work full-time at Facebook. CTO/CIO/MIS N/A Bret Taylor is the Chief Technology Officer of Facebook where he oversees the long-term technical direction of foundational products such as News Feed, Search and Facebook Platform. Previously, he was the co-founder and CEO of FriendFeed, which was acquired by Facebook in August 2009. Before starting FriendFeed, Bret worked at Google, where co-created , the Google Maps API, and started Google's developer product group. Bret holds a Bachelor s degree and a Master's degree in Computer Science from Stanford University.

Board and Management Interlocks Director/Officer Position Interlocked Company Position with Interlocked Company

James W. Breyer Board Member Wal-Mart Stores, Inc. Presiding Independent Director

James W. Breyer Board Member Dell Inc. Independent Director

James W. Breyer Board Member Accel Partners Partner

James W. Breyer Board Member Brightcove, Inc. (fka: Video Board Member Marketplace, Inc.) James W. Breyer Board Member Prosper Marketplace, Inc. Board Member

James W. Breyer Board Member Maven Networks, Inc. Board Member

Peter Thiel Board Member Board Member

Peter Thiel Board Member , The Partner

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 3

Top Company Cyber Liability Cases by Settlement Amount Company Acc/Filing Amount Category Subtype Docket Number Court State Date (in millions) Facebook, Inc. 8/1/2008 $9.500 Cyber/Identity Risks Unauthorized Data 5:2008cv03845 California Distribution Facebook will shut down Beacon to settle lawsuit: Facebook has agreed to shut down its much maligned Beacon advertising system to settle a class-action lawsuit. The lawsuit, filed in August 2008, alleged that Facebook and its Beacon affiliates like Blockbuster and Overstock.com violated a series of laws, including the Electronic Communications Privacy Act, the Video Privacy Protection Act, the California Consumer Legal Remedies Act and the California Computer Crime Law. The proposed settlement, announced late on Friday, calls not only for Facebook to discontinue Beacon, but also back the creation of an independent foundation devoted to promoting online privacy, safety and . The money for the foundation will come from a $9.5 million settlement fund. Facebook is looking forward to the creation of the foundation, which the company expects will team up with other safety and privacy organizations, Schnitt said. The settlement agreement needs to be approved by the U.S. District Court for the Northern District of California, San Jose Division, where the lawsuit was filed. These notifications were intended to act as a new form of "social" advertising, because they amount to endorsements of products made by trusted friends. Facebook members found Beacon complicated, as well as intrusive and stealthy. Many people were horrified to find out their friends were being informed of actions, like purchases, they had undertaken on other Web sites. Security experts and privacy advocates soon joined the chorus of critics. Although Facebook modified Beacon several times, it never took off and has languished in obscurity. Despite the Beacon fiasco, Facebook executives insist the advertising business of the privately held company is solid and growing. In addition to offering traditional online ads like banners and pay-per-click ads, Facebook continues to develop social ads and marketing vehicles, like its Facebook Pages, which organizations can use to promote their brands and products. (IDG News Service - September 19, 2009) Facebook, Inc. 9/23/2011 Cyber/Identity Risks Data/System Security 2:11-cv-02556 Kansas Breach On October 5, 2011, a case was filed against Facebook Inc. in U.S District Court, District of Kansas claiming the social media company violated wiretap laws with a tracking cookie that records users' web browsing history after they log off the site. John Graham, a 42 year old Leawood lawyer was the named Plaintiff in the lawsuit seeking class action status for the 150 million users of Facebook in the United States. Graham seeks an injunction prohibiting Facebook from intercepting electronic information from users when they are not logged in. Facebook, Inc. 9/23/2011 Cyber/Identity Risks Data/System Security 1:11-cv-00874 Texas Breach On October 5, 2011, a class action lawsuit was filed against Facebook Inc in U.S. District Court for the Western District of Texas claiming that Facebook violated the federal wiretap act by using electronic "cookies" to improperly track the Internet browsing patterns of its users. Plaintiff Michael Singley claimed that in addition to violating the federal wiretap act, Facebook also broke the law by selling information of its users' Internet behavior to other companies. Singley seeks statutory damages of up to $10,000 per violation as well as punitive damages and a potential court injunction against Facebook. Facebook, Inc. 10/29/2010 Cyber/Identity Risks Unauthorized Data Distribution Facebook says apps shared user data, promises fix: WASHINGTON - Facebook said some of its applications violated the social networking company's policies against sharing user information, and promised to fix the problem. Most transfers of information to other companies were inadvertent, Facebook Vice President Marne Levine wrote in a letter released on Wednesday and dated Oct. 29. Levine in the letter said Facebook would fix the problem. Facebook sent the letter to Republican Congressmsan Joe Barton and Democratic Congressman Edward Markey, both of whom had written to Facebook CEO Mark Zuckerberg after reports about how third-party applications on Facebook were sharing data. The Wall Street Journal previously reported that FarmVille and other popular Facebook applications transmitted user IDs to outside companies. Facebook's letter also said a handful of applications intentionally shared information with a data broker. Barton, the ranking member of the House Energy and Commerce Committee and in line to run it after Tuesday's Republican election gains, said the panel would focus on Internet privacy policies. (November 3, 2010 - msnbc.msn.com) Facebook, Inc. 3/24/2010 Cyber/Identity Risks Data/System Security Breach European regulators are investigating whether the practice of posting photos, videos and other information about people on sites such as Facebook without their consent is a breach of privacy laws. Any changes resulting from the investigation could drastically alter the way Facebook, Google's YouTube and others operate, shifting the responsibility for ensuring personal privacy from users to the company. Swiss and German data protection commissioners are demanding that Facebook explain its practice of allowing users to upload e-mail addresses, photographs and other personal details about people who haven't signed up to the site. Facebook, Inc. 2/24/2010 Cyber/Identity Risks Data/System Security Breach Facebook Glitch Sends Email to Wrong Recipients: Facebook Inc. said a glitch with a software update caused some email messages to be sent to the wrong recipients for a short time late Wednesday, raising questions about privacy on the site. A Facebook spokeswoman said the company was still investigating the problem and didn't have specific data on the number of people affected by the glitch. a bug caused some misrouting to a small number of users for a short period of time during a regular code push yesterday evening. Facebook user Pablo S. Torre said that at about 8:30 Wednesday night, he began receiving messages that were clearly not meant for him. He estimates that he received over 100 emails in the span of an hour and a half. The company added that affected users wouldn't be able to access the site while the problem was being fixed. The email glitch is the latest to cause concern about privacy on Facebook and other sites that allow people to share personal information over the Web. Companies such as Google and Facebook have been competing for users who send and store information ranging from public updates to private email. Along the way, the privacy policies of the sites have come under fire, as has the sites' ability to protect users' data. (February 26, 2010 - online.wsj.com)

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 4

Facebook, Inc. 11/10/2009 Cyber/Identity Risks Data/System Security Breach Protesters hijack more than 200 Facebook groups: Hundreds of Facebook groups have been hijacked in recent days by users pointing out what they say is a weakness in how the social-networking site handles the administration of its groups. By Tuesday morning, 286 groups had apparently been renamed Control Your Info and had a new message posted to their walls. According to Control Your Info, when Facebook group administrators step down, anyone else can take over their duties giving them access to members' personal information, the ability to send messages to all members of the group and the authority to make changes to that group. Among the groups renamed "Control Your Info" on Tuesday were a "Twilight" fan group, supporters of a high school football team and patrons of a winery. In a statement, Facebook said no confidential information has been placed at risk. The names of two Facebook users who have posted Control Your Info messages after group takeovers Janis Roukkos and Bella Roregit did not appear to have active Facebook accounts by mid-morning Tuesday. A message on Control Your Info's Web site blamed Facebook for shutting down the group's fan page. Members of the group could not be reached for comment Tuesday. The group, which offered only a YouTube account as contact information, disagreed with calling what it had done "hacking." The group's site contains pages of tips on protecting social-network users' private information. Not all members of the groups that were hijacked were taking the stunt in the spirit it was apparently intended. (November 10, 2009 - CNN) Facebook, Inc. 12/1/2008 Cyber/Identity Risks Unauthorized Data 5:11-cv-02829 California Distribution On June 10, 2011, Ryan Ung, Chi Cheng, Alice Rosen (collectively Plaintiffs) filed a class action suit against Facebook Inc. in U.S. District, Northern District of California alleging the popular social media site of using its "Like" button on third-party websites in order to collect users' browsing information even if the users don't click on the button and even if they are not Facebook members. The case was previously filed on May 5, 2011, in Superior Court of the State of California, County of Santa Clara. The suit accused Facebook of using the "Like" button to plant tracking cookies on the computers of both members and non-members of Facebook. Each time a user visits a site with a "Like" button, the user's updated browsing history was relayed to a Facebook server and associated with a unique identification number. That data is then priced, bought and sold in discrete units for marketing and other purposes. Third-party companies place the Facebook "Like" symbol on their websites as a way for members to tag a company or product they like and share their "Like" with other Facebook users. It acts as a free viral marketing tool that increases traffic and drives advertising revenue. Websites have an incentive to add "Like" buttons to their pages to increase traffic and drive advertising revenue which described the feature as an "indelible part" of the online experience. The suit said over 2.5 million websites have integrated the "Like" button, with 10,000 more adding it every day. As a result, Plaintiffs and the class have suffered loss as direct result of Facebook's conduct. Plaintiffs sought injunctive and other equitable relief to protect the interest of Plaintiffs and the Class and prohibiting Facebook from engaging in the wrongful and unlawful acts. Facebook, Inc. 7/17/2008 Cyber/Identity Risks Unauthorized Data Distribution Facebook privacy breach exposed users' hidden dates of birth: Sophos, a world leader in IT security and control, has warned computer users that Facebook accidentally publicly revealed personal information about its members, which could be useful to identity thieves. Earlier this week, the full dates of birth of many of Facebook's 80 million active users were visible to others, even if the individual member had requested that the information remained confidential. According to Graham Cluley, senior technology consultant at Sophos, a security slip-up by the website during the process of a public beta test of its new design for members' profiles left birth date information exposed. Sophos noted that birth dates were exposed via the new design that Facebook is trialing for its personal user profile pages, which currently can be accessed via ww.new.facebook.com. According to the Facebook developer's blog, Facebook will start rolling out the new profile page design to users this week. Facebook's new design for its profile pages, revealed members' personal information even if privacy settings had stated it should be hidden. (July 17, 2008 - hackinthebox.org) Facebook, Inc. 1/1/2008 Cyber/Identity Risks Unauthorized Data 3:2009cv01912 Texas Distribution Texas Woman Sues Facebook for Privacy Violations: Cathryn Harris found out after the fact that Facebook added a note every time she rented a movie from Blockbuster a note that contained her full name and the name of the movie she was renting. The 25-year-old homemaker from Dallas County, Texas, said she made the discovery last year when she rented the 1985 adventure film "The Jewel of the Nile," starring Kathleen Turner, Michael Douglas and Danny DeVito. She said an alert appeared on her Facebook profile detailing the transaction. As a result, Harris filed two lawsuits one against Blockbuster last year and one against Facebook last month. The suits claim a partnership between the two companies allowed Blockbuster to send Harris' movie-renting habits to Facebook without fair opportunity to opt out. At the heart of the suit is Facebook's controversial Beacon system, essentially a tracking flag that follows you across a network of sites and reports back to Facebook on your activity. For consumers, it's a way to share more information about your daily activity; for advertisers, it's a way to learn a great deal more about an individual. Harris initially sued Blockbuster, arguing that the company is responsible for her privacy. But Blockbuster disagrees. (November 5, 2009 - Fox News) On February 9, 2010, a Notice of Dismissal was filed by Plaintiff's Cathryn Elaine Harris, Mario Herrera and Maryam Hosseiny against Defendants. Facebook, Inc. 11/22/2010 Cyber/Identity Risks Identity Theft/Fraudulent 3:10-cv-05282 California Use of Personal Data On November 22, 2010 Robyn Cohen filed a class action complaint against Facebook Inc. (Facebook) in the US District Court for Northern District of California. The action was related to Facebook's alleged violation of statutory right of publicity, violation of common law right of publicity, violation of business & profession code. According to the complaint, Facebook used underage users' names, photographs, and likenesses for advertising or soliciting Friend Finder service without parental consent. In connection with services, Facebook used commerce words, terms, names, symbols or devices, false designations of origin, false or misleading description of fact or representation of fact which cause confusion, mistake, or to deceive as to the origin, sponsorship, or approval of the services. Furthermore, Facebook violated the plaintiff's statutory and common law rights of publicity as defined in Business and Professions Codes. The plaintiff sought the determination of the action for an award of $750 for the violation of statutory right of publicity, award of actual damages in no less than $ 100,000,000, injunctive relief, attorney's fees and litigation costs, and other relief. On June 27, 2011, the court granted the motion to dismiss, with leave to amend. On July 18, 2011, the plaintiff filed an amended complaint. On August 1, 2011, Facebook Inc. moved to dismiss the First Amended Complaint. On October 27, 2011, the court granted the motion to dismiss without leave to amend stating that plaintiffs have failed to plead a cognizable injury. On the same day, the court entered the Judgment in favor of defendant Facebook Inc. and against plaintiffs.

Recent Federal Dockets for the Company Caption File date Category Docket Number Court

Thompson v. Facebook, 9/29/2009 Personal Injury 1:09cv22927 US District Court for the Southern District of Florida Inc Barnes v. Cus Nashville, 8/20/2009 Personal Injury 3:09cv764 US District Court for the Middle District of Tennesse LLC

Clash Events with the Industry Description Root Cause

Auto-Completion Technology Patent Infringement

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 5

Zynga Game Network, Inc. 2009 Marketing Practices

TheFaceBook.com - 2004 - 2007 Intellectual Property

Facebook Inc. 2011 Wiretapping/Tracking cookie

MSCAd Large Losses for the Industry (Cyber Liability)

Top Industry Cyber Liability Cases by Accident/Filing Date Top Industry Cyber Liability Cases by Settlement Amount

Company Acc/Filing Amount Category Subtype Company Acc/Filing Amount Category Subtype Date (in millions) Date (in millions) So-Net 5/20/2011 $0.001 Cyber/ Data/System Acxiom Corp 12/18/2003 $5.800 Cyber/Identity Data/System Entertainment Identity Risks Security Risks Security Corp Breach Breach Sony hacked again: Sony Corp. has been hacked again. So-Net, the Milford, Ohio Man Pleads Guilty to Hacking: Intrusion and Theft of Data Cost Internet service provider unit of Japan's Sony, alerted customers an Company $5.8 Million. CINCINNATI -- Daniel Jeremy Baas, age 25, of 308 intruder broke i... Va... Square Enix 5/13/2011 Cyber/ Data/System Choicepoint Inc. 4/1/2008 $0.275 Cyber/Identity Data/System Hldgs Co Ltd Identity Risks Security Risks Security Breach Breach Hackers access 25,000 customers' details from video game developer: Consumer Data Broker ChoicePoint Failed to Protect Consumers' Personal Hackers have accessed 25,000 customers' details from video game Data, Left Key Electronic Monitoring Tool Turned Off for Four Months: developer Square E... ChoicePoi... Aaron's, Inc. 12/22/2010 Cyber/ Data/System So-Net 5/20/2011 $0.001 Cyber/Identity Data/System Identity Risks Security Entertainment Risks Security Breach Corp Breach On May 3, 2011, a class action complaint has been filed in the United Sony hacked again: Sony Corp. has been hacked again. So-Net, the Internet States District Court for the Western District of Pennsylvania by Plaintiffs service provider unit of Japan's Sony, alerted customers an intruder broke i... Cry... Square Enix 5/13/2011 Cyber/Identity Data/System Nco Group, 2/5/2010 Cyber/ Data Lost or Hldgs Co Ltd Risks Security Inc. Identity Risks Stolen Breach UWMC patient financial information compromised: In early February, an Hackers access 25,000 customers' details from video game developer: Hackers employee of the National Collection Office (NCO) Financial Systems Inc., a have accessed 25,000 customers' details from video game developer Square debt-... E... Equifax Inc. 1/19/2010 Cyber/ Unauthorized Aaron's, Inc. 12/22/2010 Cyber/Identity Data/System Identity Risks Data Risks Security Distribution Breach Equifax tax forms expose worker Social Security numbers: An unknown On May 3, 2011, a class action complaint has been filed in the United States number of current and former employees of credit reporting firm Equifax District Court for the Western District of Pennsylvania by Plaintiffs Cry... received W... Nco Group, Inc. 2/5/2010 Cyber/Identity Data Lost or Risks Stolen

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 6

SRA 1/21/2009 Cyber/ Unauthorized UWMC patient financial information compromised: In early February, an International Identity Risks Data employee of the National Collection Office (NCO) Financial Systems Inc., a Inc. Distribution debt-... Personal information of current/former employees and customers Equifax Inc. 1/19/2010 Cyber/Identity Unauthorized compromised as a result of virus attack: The SRA Information Technology Risks Data Services (ITS) ... Distribution Synopsys Inc 5/26/2008 Cyber/ Data Lost or Equifax tax forms expose worker Social Security numbers: An unknown number Identity Risks Stolen of current and former employees of credit reporting firm Equifax received W... No benefits, just agita: former Avant Employees' notified of Colt Express SRA 1/21/2009 Cyber/Identity Unauthorized breach: Colt Express Outsourcing Services, Inc. used to provide third-party International Risks Data ... Inc. Distribution Rent-A-Center 5/9/2008 Cyber/ Improper Personal information of current/former employees and customers compromised Inc Identity Risks Disposal of as a result of virus attack: The SRA Information Technology Services (ITS) ... Records Synopsys Inc 5/26/2008 Cyber/Identity Data Lost or Rental Customer's Data Trashed: Customer files from the former RentWay Risks Stolen were not shredded. In dress slacks and business shirts, Rent-A-Center No benefits, just agita: former Avant Employees' notified of Colt Express employees... breach: Colt Express Outsourcing Services, Inc. used to provide third-party ... Choicepoint 4/1/2008 $0.275 Cyber/ Data/System Rent-A-Center 5/9/2008 Cyber/Identity Improper Inc. Identity Risks Security Inc Risks Disposal of Breach Records Consumer Data Broker ChoicePoint Failed to Protect Consumers' Personal Rental Customer's Data Trashed: Customer files from the former RentWay Data, Left Key Electronic Monitoring Tool Turned Off for Four Months: were not shredded. In dress slacks and business shirts, Rent-A-Center ChoicePoi... employees... . 2/7/2008 Cyber/ Data Lost or com Inc Identity Risks Stolen Salesforce breach: The Company recently became aware of a theft of an unencrypted external storage device. The storage device may have contained the p...

For more information contact your Advisen rep at +1.212.897.4800, email [email protected], or visit www.advisen.com 7

Recent News

Social media 'played a negative role in unrest' [Gulf Daily News (Bahrain)] 11/28/2011

SOCIAL media has played a negative role and fuelled the unrest in Bahrain with "highly inflammatory" information, according to a report by the Bahrain Independent Commission of Inquiry (BICI).

The Commission stated that it was "aware" of the impact of the use of social media websites, such as Facebook and , has had on some major social and political events in the contemporary world.

"The commission found numerous examples of exaggeration and misinformation, some highly inflammatory, that were disseminated through social media," the report stated.

Specifically in the chapter on Allegations of Media Harassment, the report has pointed out incitement by a Twitter group named Harghum.

The group posted names and photographs of alleged protesters, and sometimes even posted protesters' addresses, telephone numbers and current locations.

Witnesses reported to the commission that persons who had been named or identified by Harghum would avoid sleeping at their home address for fear of an attack.

"The commission considers such harassment to be a violation of a person's right to privacy while also amounting to hate speech and incitement to violence," it stated.

It viewed a selection of material from national television, radio and print media for review.

Another issue raised in the findings was that mainstream media in Bahrain ignored views of opposition groups.

"The lack of access to mainstream media creates frustration within opposition groups and results in these groups resorting to other media such as social media," stated the report.

This, it said, could have a "destabilising effect" because social media outlets were both untraceable and unaccountable, when such media was used to promulgate hate speech and incitement to violence.

The commission recommended the Bahrain government to relax censorship and allow the opposition greater access to television and radio broadcasts as well as print media.

Errors

The BICI team also met officials from Information Affairs Authority (IAA), who provided a file concerning the involvement of the international media in the events of February and March.

The IAA alleged that there was incitement practised by some foreign media against Bahrain.

It also stated that the international media made factual errors when reporting on events.

"Much of this material contained derogatory language and inflammatory coverage of events, and some may have been defamatory,"said the BICI.

"However, the commission did not find any evidence of media coverage that constituted hate speech or incitement to violence." [email protected]

Xinhua: Sri Lanka Opens Public Page on Chinese Facebook To Promote Tourism 11/28/2011

Material in the World News Connection is generally copyrighted by the source cited. Permission for use must be obtained from the copyright holder. Inquiries regarding use may be directed to NTIS, US Dept. of Commerce.

[Computer selected and disseminated without OSC editorial intervention]

COLOMBO, Nov. 28 (Xinhua) -- Sri Lanka which has already exceeded its tourism target for the year 2011 opened a public page on Chinese Facebook - www.renren.com, with the aim of attracting more Chinese tourists to the country, an official said Monday.

In an ambitious plan to accelerate tourism in the country which faced travel ban from many countries for years due to devastating ethnic conflict for three decades, the Sri Lanka Tourism Promotion Bureau launched its latest promotion to attract more Chinese tourists, said Rumy Jauffer, managing director of the bureau.

For the first time ever in the country's tourism history, Sri Lanka has welcomed 750,000 tourists so far this year, achieving its forecasted target for the year 2011 much ahead of scheduled December 31.

"As the booming economy of has led to a creation of a rich middle class and extensive per capita spending, targeting the Chinese travel market would be an ideal opportunity for Sri Lanka, " Jauffer said. He said opening a public page on www.renren.com is a key aspect in promoting a destination via social media and creating awareness.

"We have already implemented a number of programs targeting the broad tourist base in China with the support of Chinese tour agencies," Jauffer said.

According to the latest data released by the Sri Lanka Tourism Board, tourists from China grew by 71 percent to 13,889 during the first ten months of 2011.

[Description of Source: Beijing Xinhua in English -- China's official news service for English-language audiences (New China News Agency)]

Material in the World News Connection is generally copyrighted by the source cited. Permission for use must be obtained from the copyright holder. Inquiries regarding use may be directed to NTIS, US Dept. of Commerce.

Sending a fraud request FACEBOOK SCAM 11/28/2011

A Facebook scam, dubbed the cleverest yet, gets users to provide their passwords and financial details by accusing them of violating the site's policy and threatens to delete their account.

Experts said the recent assault designed to steal users' Facebook details is among the most sophisticated yet because it mimics the security procedures that sites use to defend against internet trolls and other bad behaviour online.

The scam comes in an email accusing the user of insulting or annoying another Facebook user and saying their account will be deleted in 24 hours.

The email requires Facebook login details and, for ``authentication'' purposes, parts of a person's details.

The email links to a fake account disabled page that asks for personal details, including credit card information.

The access to login details helps the scam travel farther and faster by sending it to new users from trusted friends.

``The emails are entirely bogus,'' internet security experts Sophos said.

``They are not coming from Facebook . Social media venues would not request financial information, nor would they request login details.

``With the credit card information, fraudsters can conduct identity theft and other malicious financial activity.''

Website Hoax-Slayer discovered the scam and warned against emails with the phrase: ``LAST WARNING: Your account is considered to violated the policies that are considered annoying or insulting to Facebook users.''

Twit pics could rob dream job BOSSES `SCREENING' 11/28/2011

Warning to jobseekers: the photo you posted on Facebook when you were wasted at a music festival may ruin your chance of landing a dream job.

New research from Telstra found more than a quarter of Australian employers use social networking sites to screen candidates.

Posting discriminatory comments was the biggest job killer, with 37 per cent of employers saying it counted against applicants. Employers are also unlikely to rate drunken party photos on your profile, with 31 per cent saying they would hurt your chances of being hired.

University of Canberra social media expert Lubna Alam said job seekers should ensure the content on their social media pages did not portray them as unprofessional or unreliable, as employers are searching profiles for clues about an applicant's personality.

``They could decide that someone who posts photos of drug or alcohol use isn't suitable for their company,'' Alam said.

``We now live in a world where people have personal, professional and online lives and it is really important to learn to manage your reputation in each one.''

Alam said social media could also be used to land the right job.

``Twitter profiles can display your communication, searching and critical thinking skills to your future boss,'' she said.

Telstra officer of internet trust and safety Darren Kane said social media users should understand privacy settings and use them appropriately.

Taipei Times: DPP Chides MAC Facebook Contest as Unification Ploy 11/28/2011

Material in the World News Connection is generally copyrighted by the source cited. Permission for use must be obtained from the copyright holder. Inquiries regarding use may be directed to NTIS, US Dept. of Commerce.

[Computer selected and disseminated without OSC editorial intervention]

Democratic Progressive Party (DPP) legislators said the Mainland Affairs Council (MAC) is trying to "gradually unify the two sides of the Strait by connecting cross- strait culture," as evidenced by an activity it held on its Facebook page.

The trivia contest, which began on Nov. 9 and closed on Friday, was titled "The Global Village - Feng Shen Bang" and emphasized the differences in Internet lingo around the world.

The homepage started with the question: "Did you know Chinese netizens use the term qiang sha fa to mean qiang tou xiang?"

This was followed by a test on the differences in vocabulary usage between Chinese and Taiwanese netizens.

Qiang sha fa and qiang tou xiang mean to be the first to post a response on a blog or a forum.

The contest could only be accessed by netizens who "like" the council's Facebook page. Comprising 10 questions, it asked for the Chinese Internet lingo equivalent of items such as instant coffee, hair dryers, roller coasters and soft-drink cans.

To draw more participants to the event, the council offered movie tickets and other gifts. The first 200 participants also received a "Door God" figurine.

Critics have said that although it was titled "The Global Village," it only asked for the equivalent used in China.

The contest was not widely participated in, with only 13 posts in total, with one netizen surnamed Lee writing that when asking friends in China about some of the vocabulary listed in the questions, they also did not know.

DPP caucus whip Tsai Huang-liang criticized the council on Saturday, saying that the agency was wasting public funds and not doing its job.

Tsai said the council was trying to link Chinese culture with Taiwan and promoting gradual unification by making people understand the different names and appellations used by the separate cultures.

"This is an obvious attempt to unify China and Taiwan under the table," Tsai said.

In response, the council said the era of the global village was a time when one should understand different cultures, customs and languages, and broaden one's views, adding that Taiwanese should not close themselves off.

Translated by Jake Chung, staff writer

[Description of Source: Taipei Taipei Times Online in English -- Website of daily English-language sister publication of Tzu-yu Shih-pao (Liberty Times), generally supports pan-green parties and issues; URL: http://www.taipeitimes.com]

Material in the World News Connection is generally copyrighted by the source cited. Permission for use must be obtained from the copyright holder. Inquiries regarding use may be directed to NTIS, US Dept. of Commerce.

Also views on tech jobs, Facebook privacy 11/27/2011

In his opinion piece "Lobbyists aren't the problem," Bradley Smith, chairman of the Center for Competitive Politics, made quite a stretch in saying that the problem is too much government power. It supposes that if somehow the size of government shrinks, then the lobbyists won't offer expensive trips or gifts to members of Congress in return for their votes (Opposing view, Capital corruption debate, Nov. 21).

The problem is that once elected to Congress, people will do just about anything to get re-elected. And that means taking gifts from lobbyists in return for their votes. Then they get campaign contributions from the companies the lobbyists represent.

If there were term limits, this wouldn't happen. Lawmakers wouldn't have to raise funds to get re-elected. They could spend all their time doing the job they were elected to do. Entrenched members of Congress are the problem, not the size of government.

Montez Beard

Casa Grande, Ariz.

Offer competitive wages

USA TODAY's article "Foreign firms troll for tech grads" started strong and then fizzled. It made the important point that there is no shortage of U.S. students to take tech jobs, if only U.S. companies offered them competitive salaries and hired them (Money, Nov. 17).

Instead, foreign firms "are swooping in and recruiting" them, while U.S. politicians "decry a lack of engineering talent" and want to open the door to more low-paid, foreign non-immigrant temporary workers by increasing the number of H-1B visas.

Vivek Wadhwa is a leading proponent of this wage-cutting and outsourcing of U.S. jobs; it is bizarre that you ended the story with his call to import more foreign tech workers to the U.S. Ross Eisenbrey, vice president

Economic Policy Institute

Washington, D.C.

Lack of privacy expected

The recent privacy leaks by Facebook are irritating, but not very surprising. To be honest, a company that broadcasts every little action performed by its users to each one of his or her "friends" would naturally make use of these tracking cookies ("Member or not, visit Facebook , and it tracks you," Cover story, News, Nov. 16).

I doubt Facebook CEO Mark Zuckerburg or the company had any bad intentions; however, that does not justify tracking customers' Web visits simply to improve their product.

The company also has come under fire lately because of the hacking of profiles and the plastering of pornographic and graphic images on users' pages. This is the last straw to many people, with some leaving the site possibly for other less intrusive social networking options. This security weakness definitely won't end Facebook's popularity, but it also won't soon be forgotten in the minds of many users.

Facing up to Facebook [Web Newswire (India)] 11/24/2011

India, Nov. 24 -- The Commissioner for Children Aileen Ashford invites the Tasmanian media to Facing up to Facebook : the impact of technology on Children, Young People, their Families & the Sector TODAY, Friday, November 25.The forum will highlight work from the sector on strategies that acknowledge and support positive ways, children, young people and their families can use information technology in their daily lives.The day will showcase user-friendly technologies that increase the capacity of the sector to address the needs of children, young people and their families.WHAT: Facing up to FacebookWHEN : 9.30am, Friday, 25 NovemberWHERE: Hobart Function & Conference Centre, Elizabeth Street Pier,Hobart.Special Note: The keynote presenters will be available at lunch at 12.35pm for media interview.The Keynote presenters are: Fiona Smart, Branch Manager of the Safety Taskforce for FaHCSIA, and Kate Hadwen, Senior Research Fellow, Child Health Promotion Research Centre, Edith Cowan University." Facebook is a reality for all Tasmanians and especially Tasmanian families," Ms Ashford said."What Facing up to Facebook will examine are the positives and negatives of this reality - how children can use Facebook and other technologies positively and how can they avoid some of the pitfalls that exist."KEYNOTE PRESENTERSFiona Smart, Branch Manager of the Safety Taskforce for FaHCSIAIn 2010, the Department of Families, Housing, Community Services and Indigenous Affairs (FaHCSIA) implemented a national campaign to promote respectful relationships amongst children and young web users. 'The Line' campaign reaches out to its target group using online animations or 'webisodes'. Fiona has a vast experience in the commonwealth government human services arena and has led business system development projects, impacting across the department and service providers. Kate Hadwen, Senior Research Fellow, Child Health Promotion Research Centre, Edith Cowan UniversityKate Hadwen is a Senior Research Fellow with the Child Health Promotion Research Centre. Kate has taught Junior, Middle and Senior school students in Government, Catholic and Independent schools in three states of Australia. She has been a curriculum co-ordinator, Deputy Principal and Head of Boarding. Kate has also worked as the National Project Manager and curriculum writer for a resilience building, school and community based program. Kate currently directs the Telstra Cyber Friendly Families Project and is Project Coordinator of the Cyber Friendly Schools Project. The focus of Kate's work is translating research findings on Cyber Bullying into materials which support families, students and schools.Kate has been instrumental in developing InSupport: it's how the net works. InSupport is developing an engaging clip based, learning journey to assist young people, their families and school staff use technology (mobile phones and laptops, PCs/ tablets) in a positive and safe manner. Facing up to Facebook is a partnership between the Commissioner for Children, the Department of Health & Human Services & Department Premier and Cabinet. Published by HT Syndication with permission from Web Newswire. For any query with respect to this article or any other content requirement, please contact Editor at [email protected]