5. Variable Annuity Life Insurance Company
A former financial adviser at Variable Annuity Life Insurance Company allegedly stole a thumb drive containing data on more than 774,000 people that participate in the firm's insurance programs. The Amarillo, Texas-based subsidiary of American International Group said the information included customer names and full or partial Social Security numbers. The breach was first reported in October, but the firm sent an update in February to state Attorneys General about the status of the security incident. The company said it needed time to cull through the data stored on the drive to accurately notify impacted customers. Breach notifications were sent out in April and indicated that the employee had left the insurance company in 2007. The firm didn't indicate how it was alerted to the stolen drive.