Incident Outcomes and Costs
| Company/ Org | Incident/ Tragedy | Incident Year | Costs (est.) | Settled | Direct victims (est.) | Industry |
|---|---|---|---|---|---|---|
| Equifax | Data Breach | 2017 | $242,700,000 | 2018, ongoing | Around 150,000,000 | Corporation |
| Anthem, Inc. | HIPAA Violation, Cyber Attack | 2015 | $16,000,000 | 2018 | almost 79 million | Corporate |
| Yahoo Hack | Data Breach | 2014 | $35,000,000 | 2018 | 3,000,000+ | Corporation |
| Home Depot Inc. | Records & Waste Disposal | Ongoing | $27,840,000 | 2018 | Undiscolsed | Corporation |
| Michigan State University (Larry Nassar) | Physical assault, sexual assault | 1997-2016 | $500,000,000 | 2018 | 150+ | Higher Ed |
| Advocate Illinois Masonic Medical Center | Physical assault, Unsafe Work Conditions | 2013, 2014 | $10,000,000 | 2018 | 7 | Healthcare |
| University of Montana | Clery Act violation, underreporting crime stats | 2013-2016 | $966,614 | 2018 | N/A | Higher Ed |
| Woodland Hills School District (Pittsburgh, PA) | Assault, Intimidation, and Filing false criminal charges | 2017 | $530,000 | 2018 | 5 | K12 |
| Wayne State University | Faulty crime reporting | 2013, 2014 | $127,000 | 2018 | -- | Higher Ed |
| Baylor University | Sexual Assault | 2012 | Reputation damage, undisclosed sum | 2017, ongoing | -- | Higher Ed |
| Stanford University | Sexual Assault | 2016 | Reputation damage | 2017, ongoing | 1 | Higher Ed |
| Children’s Medical Center of Dallas | HIPAA Violations, spanning several years, Data Breach | 2010, 2013 | $3,200,000 | 2017 | 6262 | Healthcare |
| Southeastern Oklahoma State University | Trans-gender Discrimination | 2010 | $1,000,000 | 2017 | 1 | Heathcare |
| University of California Santa Cruz | Sexual assault | 2015 | $1,150,000 | 2017 | 1 | Higher Ed |
| Kansas State University | Sexual assault, Title IX | 2014 | $395,000 | 2017 | 2 | Higher Ed |
| West Virginia University | Sexual Assault | 2014 | $100,000 | 2017 | 1 | Higher Ed |
| University of California | Harassment, Title IX | 2016 | $80,000 | 2017 | 1 | Higher Ed |
| Anthem | Data Breach - Phishing attacks and data leaks | 2015 | $115,000,000 | 2017 | 80,000,000 | Healthcare |
| Fresenius Medical Care North America | HIPAA Violation | 2012 | $3,500,000 | 2017 | -- | Healthcare |
| Cabrillo College | Sexual harassment | 2016 | $350,000 | 2017 | 1 | Higher Ed |
| Horry County Schools, South Carolina | Ransomware Attack, Data | 2016 | $8,500 | 2016 | -- | K12 |
| Seagate Technologies | Data Breach - Spear PhishingW-2 Enterprise Attack | 2015 | $8,008,000 | 2016 | 52,000 | IT |
| Epic Health Services | OSHA fine from Sexual Assault | 2016 | $98,000 | 2016 | -- | Healthcare |
| Kantar Group | W-2 Enterprise Attack, Data | 2016 | $4,312,000 | 2016 | 28,000 | Data investment |
| Univ. of Tennessee | Sexual Assault | 2015 | $2,480,000 | 2016 | 6 | Higher Ed |
| Hollywood Presbyterian Medical Center | Ransomware Attack, Data | 2016 | $17,000 | 2016 | -- | Healthcare |
| Scoular Company | Data breach - Spear Phishing | 2015 | $17,200,000 | 2015 | -- | Finance/Stocks |
| West Virginia University | Sexual Assault by faculty | 2014 | $1,300,000 | 2015 | -- | Higher Ed |
| United States Office of Personal Management | Data Breach | 2014 | 133,000,000+ | 2015 | 21,500,000+ | Gov |
| University of Connecticut | Settlement regarding Sexual Assault Mishandling | 2014 | $1,300,000 | 5 | Higher Ed | |
| Tehachapi Unified School District | District "did not adequately investigate or otherwise respond" to the bullying of a gay student, resulting in student's suicide. | 2014 | $750,000 | 1 | K12 | |
| East Central University | Racial Discrimination | 2014 | $15,000 | 1 | Higher Ed | |
| Rutgers University | Racial Discrimination | 2014 | $136,239 | 1 | Higher ED | |
| University of Iowa | Disability discrimination | 2014 | $10,000 | 1 | Higher Ed | |
| Minnewaska School District (MSD) | Mishandled response to Social Media post - Settlement | 2014 | $70,000 | 1 | K12 | |
| University of Connecticut | Sexual/Gender Discrimination and Retaliation | 2014 | $1,280,000 | 5 | Higher Ed | |
| Portland State University | Disability discrimination | 2014 | $161,500 | 1 | Higher Ed | |
| Brookdale University Hospital and Medical Center in Brooklyn | Numerous incidents of workplace violence that lead to no action or resolve | 2014 | $78,000 | 40 | Healthcare | |
| University of Tennessee | Age Discrimination, Sexual/Gender Discrimination | 2014 | $320,000 | 1 | Higher Ed | |
| University of Maryland | Data Breach | 2014 | 309,079 | Higher Ed | ||
| Sterling High School District (SHSD) | Mishandled response to Social Media post - Settlement | 2014 | $9000 - for legal fees | 1 | K12 | |
| Xoom Corp. / PayPal | Data breach - Spear Phishing | 2014 | $30,800,000 | -- | IT | |
| University of Colorado at Bolder | Sexual Assault | 2014 | $800,000 | -- | Higher Ed | |
| Parkview (Ill.) Health System | HIPAA Violation | 2014 | $800,000 | -- | Healthcare | |
| Martinsville West Middle School. | School Shooting | 2014 | TBD | 2 | K12 | |
| AvMed (Gainesville, Fla.) | Settlement - HIPAA related? | 2014 | $3,000,000 | -- | Healthcare | |
| N/a | Clery Act Violation | 2014 | $100,000 | 1 | Higher Ed | |
| Snohomish School District | Negligence in protecting victims from a mentally ill classmate who stabbed them on-campus unprovoked | 2014 | $1,300,000 | 2 | K12 | |
| DeKalb County School District, GA | Verbal and physical harassment based on national origin and religion. | 2013 | Litigation fees | 1 | K12 | |
| Yale University | Sexual Assault Mishandling | 2013 | $155,000 | 4 | Higher Ed | |
| Indian River Central School District, NY | Physical and verbal anti-gay harassment; plaintiffs were prohibited from forming a gay-straight alliance in high school. | 2013 | Undisclosed | 2 | K12 | |
| Malcolm Public Schools, NE | Physical and verbal harassment. | 2013 | $75,000 | 1 | K12 | |
| Onteora Central School District, NY | Physical and verbal anti-gay harassment. | 2013 | Undisclosed | 1 | K12 | |
| South Madison Community Schools, Indiana | Verbal and written harassment. | 2013 | $50,000 | 1 | K12 | |
| Baltimore City Public Schools, MD | Physical assault | 2013 | $45,000 | 1 | K12 | |
| Duval County School Board, FL | Physical assault. | 2013 | $100,000 | 1 | K12 | |
| WellPoint (Indianapolis) | HIPAA Violation | 2013 | $1,700,000 | -- | Healthcare | |
| The School Board of Palm Beach County, Florida | Sexual assault. | 2013 | $1,700,000 | 1 | K12 | |
| UNC | Title IX complaint | 2013 | $600,000 | 1 | Higher Ed | |
| Bainbridge Island School District, WA | Sexual assault and harassment | 2013 | $300,000 | 1 | K12 | |
| UCLA | Racial Discrimination | 2013 | $4,500,000 | 1 | Higher ED | |
| Maricopa Community Colleges | Data Breach | 2013 | $20,000,000 | Thousands | Higher Ed | |
| Affinity Health Plan (New York City) | HIPAA Violation | 2013 | $1,200,000 | -- | Healthcare | |
| Horizon Blue Cross Blue Shield | Data Breach | 2013 | $1,000,000 | 690,000 | Healthcare | |
| Alaska HHS (Anchorage) | HIPAA Violation | 2012 | $1,700,000 | -- | Healthcare | |
| Arizona State University | Data Breach | 2012 | 300,000 | Higher Ed | ||
| Massachusetts Eye and Ear Infirmary, Massachusetts Eye and Ear Associates | HIPAA Violation | 2012 | $1,500,000 | -- | Healthcare | |
| Roe School District, CA | Anti-Semitic and anti-gay taunts; attempted suicide | 2012 | $1,350,000 | 1 | K12 | |
| Roe School District, CA | Sexual assault of special needs student. | 2012 | $3,000,000 | 1 | K12 | |
| University of North Carolina, Charlotte | Data Breach | 2012 | 350,000 | Higher Ed | ||
| Robertson County Board of Education, TN | Physical assault on disabled student with Asperger syndrome | 2012 | $300,000 | 1 | K12 | |
| Racine Unified School District, Wisconsin | Physical and verbal harassment. | 2012 | $15,000 | 1 | K12 | |
| Northwest Florida State College | Data Breach | 2012 | 279,000 | Higher Ed | ||
| N/A | Average lifetime cost per victim of nonfatal child maltreatment (which includes sexual abuse | 2012 | $210, 012/student | 3.5 million students currently in school who report physical educator sexual misconduct | K12 | |
| Blue Cross Blue Shield Tennessee (Memphis) | HIPAA Violation | 2012 | $1,500,000 | -- | Healthcare | |
| Pine Plains Central School District, NY | Racial harassment, including assault | 2012 | $1,000,000 | 1 | K12 | |
| Eugene School District, OR | Anti-gay verbal and physical harassment based on perceived sexual orientation. | 2012 | $5,000 | 1 | K12 | |
| Indianapolis Public Schools, Indiana | Anti-gay physical and verbal harassment | 2012 | $65,000 | 1 | K12 | |
| Irvington Board of Education, NJ | Physical assault, resulting in paralysis and brain damage. | 2012 | $13,000,000 | 1 | K12 | |
| Union-Scioto Local School District, OH | Anti-gay physical harassment | 2012 | $35,000 | 1 | K12 | |
| Sycamore Community School Board of Education, OH | Physical and verbal harassment based on sex, resulting in suicide | 2012 | $220,000 | 1 | K12 | |
| University of Nebraska | Data Breach | 2012 | 654,000 | Higher Ed | ||
| M.R. Enterprise | Physical Assault, Workplace Violence | 2012 | 1,900,000 | 1 | Corporation | |
| Scranton School District, PA | Verbal harassment. | 2012 | $97,500 | 1 | K12 | |
| Pine Bush Central School District (PBCSD) | Racial Discrimination | 2015 | $4,480,000 | 5 | K12 | |
| Board of Education of the Borough of Ramsey, NJ | Physical assault, resulting in paralysis. | 2012 | $4,200,000 | 1 | K12 | |
| Washington State University | Racial Discrimination and retaliation | 2012 | $650,000 | 2 | Higher Ed | |
| Evergreen School Districts | Negligence | 2015 | $15,000,000 | 5 | K12 | |
| Ashland High School, Wisconsin | Anti-gay harassment, including assaults; plaintiff hospitalized and attempted suicide. | 1996 | $962,000 | 1 | K12 | |
| Green Local School District, Ohio | Bullying/Harassment | 2015 | $500,000 | 1 | K12 | |
| Florida A&M University | Hazing lead to death | 2015 | $1,100,000 | 1 | Higher Ed | |
| Chapman University | Racial Discrimination | 2014 | $75,000 | 1 | Higher ED | |
| Stanford Hospital & Clinics (California) | Settlement - HIPAA related? | 2014 | $4,000,000 | -- | Healthcare | |
| Concentra Health Services (Addison, Texas) | HIPAA Violation | 2014 | $1,700,000 | -- | Healthcare | |
| Cook County Hospitals | Wrongful death suit | 2014 | $2,250,000 | 1 | Healthcare | |
| Sony | Physical Security Breach, Stolen Passwords and malware | 2014 | $15,000,000 | -- | Corp | |
| New York-Presbyterian Hospital and Columbia University | HIPAA Violation | 2014 | $4,800,000 | -- | Healthcare | |
| Penn State | Child Sexual Abuse | 2011 | $92,000,000 | 26 | Higher Ed | |
| Savannah State University | Racial Discrimination | 2011 | $240,000 | 1 | Higher Ed | |
| Emerson Board of Education, NJ | Physical and verbal harassment based on sexual orientation | 2011 | $130,000 | 1 | K12 | |
| Cignet Health (Temple Hills, Md.) | HIPAA Violation | 2011 | $4,300,000 | -- | Healthcare | |
| El Camino College | Sexual Assault by boss | 2011 | $2,500,000 | -- | Higher Ed | |
| California School Districts x 11 (Central Unified School District (Fresno), Elk Grove Unified School District, Kern High School District, Long Beach Unified School District, Los Angeles Unified School District, San Bernardino City Unified School District, San Diego Unified School District, San Francisco Unified School District, San Jose Unified School District, Santa Ana Unified School District, and Stockton Unified School District) | Verdicts, settlements and outside counsel | 2010-2013 | $125,601,567 | -- | K12 | |
| Aberdeen School District, WA | Racial harassment; anti-gay sexual harassment | 2010 | $135,000 | 1 | K12 | |
| Fargo School District, ND | Physical and verbal harassment; several attempted suicides. | 2010 | $300,000 | 1 | K12 | |
| Ohio State University | Data Breach | 2010 | 750,000 | Higher Ed | ||
| Blue Springs School District, MO | Physical assaults and verbal harassment resulting in suicide | 2010 | $500,000 | 1 | K12 | |
| Rite Aid (Camp Hill, Pa.) | HIPAA Violation | 2010 | $1,000,000 | -- | Healthcare | |
| School District of Philadelphia, PA | National origin harassment, including assault | 2010 | Litigation fees | 30 | K12 | |
| Bartholomew Consolidated School Corporation, Indiana | Verbal harassment and sexual rumors | 2010 | $100,000 | 1 | K12 | |
| The City of New York, NY | Physical and verbal harassment | 2010 | $30,000 | 1 | K12 | |
| Pittsburgh Public Schools, PA | Harassment based on female student's weight. | 2010 | $55,000 | 1 | K12 | |
| Newport-Mesa Unified School District, CA | Anti-gay and anti-female cyberbullying; verbal threats and harassment on school grounds. | 2009 | Attorneys'¥ fees | 1 | K12 | |
| Dominican College in New York | Sexual Assault Mishandling | 2009 | $20,000 | 1 | Higher Ed | |
| University of North Carolina, Chapel Hill | Data Breach | 2009 | 236,000 | Higher Ed | ||
| Hudson Area School, MI | Sexual harassment, including assault | 2009 | $800,000 | 1 | K12 | |
| Wayne County Board of Education, TN | Sexual harassment, including assault | 2009 | $200,000 | 2 | K12 | |
| Gustine Unified School District, CA | Sexual assault and hazing. | 2009 | Undisclosed | 1 | K12 | |
| CVS Pharmacy (Woonsocket, R.I.) | HIPAA Violation | 2009 | $2,250,000 | -- | Healthcare | |
| Lenape Valley Regional Board of Education, NJ | Racial harassment. | 2009 | $275,000 | 1 | K12 | |
| University of Illinois Hospital & Health Sciences System | Wrongful death suit | 2009 | $9,000,000 | 1 | Healthcare | |
| Kern High School District, CA | Physical assault; hazing. | 2009 | $260,000 | 1 | K12 | |
| Mohawk Central School District, NY | Harassment involving gender-based stereotyping | 2009 | $75,000 | 1 | K12 | |
| Poway Unified School District, CA | Anti-gay harassment and physical assault | 2008 | $421,357 | 2 | K12 | |
| Eastern Michigan University | Sexual/Gender Discrimination | 2008 | $175,000 | 1 | Higher ED | |
| Ball State | Racial Harassment and Retaliation | 2008 | $200,000 | 1 | Higher Ed | |
| Eastern Michigan University | A host of violations, including miscoding rapes - the largest Clery fine ever | 2008 | $350,000 | -- | Higher Ed | |
| California State University, at Fresno | Sexual/Gender discrimination | 2008 | $9,000,000 | 1 | Higher Ed | |
| Eastern Michigan University | Rape and Murder | 2008 | $357,000 | 1 | Higher Ed | |
| University of Florida College of Dentistry | Data Breach | 2008 | 330,000 | Higher Ed | ||
| Lakewood School District, OH | Physical and verbal harassment | 2008 | Undisclosed | 1 | K12 | |
| Casey County Board of Education, KY | Physical and verbal abuse. | 2008 | $110,000 | 5 | K12 | |
| University of North Carolina | Sexual Harassment | 2008 | $385,000 | 1 | Higher ED | |
| Arizona State University | Sexual Assault Mishandling | 2008 | $850,000 | 1 | Higher Ed | |
| University of Wisconsin | Religious Discrimination | 2007 | $250,000 | Group | Higher ED | |
| University of Louisiana | Racial Discrimination | 2007 | $2,000,000 | 1 | Higher ED | |
| Virginia Tech | Campus Massacre | 2007 | $48,200,000 | 32 killed; 17 injured | Higher Ed | |
| Spencer-Owen Community School Corporation, Indiana | Anti-gay physical and verbal assault against a brother and sister | 2007 | $4,250 | 2 | K12 | |
| Hillel School of Tampa, FL | Physical assault (broken arm and permanent nerve damage). | 2007 | $600,000 | 1 | K12 | |
| University of California at Berkeley | Sexual/Gender Discrimination | 2007 | $3,500,000 | 1 | Higher ED | |
| LaSalle University in Philadelphia | not reporting 28 crimes, including a small number of sexual assaults | 2007 | $87,500 | 30 | Higher Ed | |
| California State University, at Fresno | Sexual/Gender discrimination | 2007 | $3,500,000 | 1 | Higher Ed | |
| University of Phoenix - Santa Teresa | Sexual/Gender Discrimination and Retaliation | 2007 | $225,000 | 1 | Higher ED | |
| New Mexico State University | Religious Discrimination | 2007 | $165,000 | 4 | Higher ED | |
| University of Colorado | Sexual Assault Mishandling | 2006 | $2,500,000 | 2 | Higher Ed | |
| East Haven Board of Education, CT | Sexual assault, harassment and suicide attempt. | 2006 | $134,423 | 1 | K12 | |
| Ohio University | Data Breach | 2006 | 300,000 | Higher Ed | ||
| Springfield School District, PA | Disability harassment, including sexual assault; and a suicide threat. | 2006 | $400,000 | 1 | K12 | |
| Pacifica School District, CA | Anti-gay physical and verbal harassment due to perceived sexual orientation. | 2006 | $100,000 | 1 | K12 | |
| University of California Los Angeles | Data Breach | 2006 | 800,000 | Higher Ed | ||
| New Haven Board of Education, CA | Anti-gay verbal and physical harassment | 2006 | Undisclosed | 1 | K12 | |
| Tonganoxie Unified School District, KS | Same-sex harassment involving gender-based stereotyping | 2005 | $440,000 | 1 | K12 | |
| Greenwich Public Schools, CT | Verbal harassment. | 2005 | Litigation fees | 1 | K12 | |
| Salem International University, in West Virginia | fines after never reporting a sexual offense in its Clery reports | 2005 | $200,000 | -- | Higher Ed | |
| University of Oregon | Sexual/Gender discrimination | 2005 | $375,000 | 1 | Higher Ed | |
| New York City Department of Education , NY | Physical and verbal harassment. | 2004 | $195,000 | 1 | K12 | |
| Anchorage School District, Alaska | Verbal and physical harassment; attempted suicide. | 2004 | $4,500,000 | 1 | K12 | |
| Perry Community School District, IOWA | Anti-gay verbal and physical abuse. | 2004 | $27,000 | 1 | K12 | |
| Maumee Board of Education, OH | Anti-gay verbal and physical harassment based on perceived sexual orientation. | 2003 | Undisclosed | 1 | K12 | |
| Morgan Hill Unified School District, CA | Anti-gay harassment, including physical assaults. | 2003 | $1,000,000 | 6 | K12 | |
| Washoe County School District, NV | Anti-gay harassment and physical assault | 2001 | $451,000 | 1 | K12 | |
| Visalia Unified School District, CA | Anti-gay verbal and physical assaults | 2001 | $130,000 | 1 | K12 | |
| Titusville Area School District, PA | Anti-gay harassment, including physical assault; attempted suicide. | 2001 | $312,000 | 1 | K12 | |
| Spencer County Public School District, KY | Sexual harassment, including assault | 2000 | $220,000 | 1 | K12 | |
| Board of Education of Somerset Independent Schools, KY | Anti-gay verbal and physical assault | 2000 | $135,000 | 1 | K12 | |
| Pleasant Hill Public School District, MO | Anti-gay physical and verbal assaults | 1999 | $72,500 | 1 | K12 | |
| Kent School District, WA | Anti-gay verbal and physical harassment. | 1997 | $40,000 | 1 | K12 | |
| City of Burlington School District, VT | Physical assault and verbal harassment | 2012 | $25,000 | 1 | K12 | |
| UCLA Health (Los Angeles) | HIPAA Violation | 2011 | $865,000 | -- | Healthcare | |
| Natrona County School District, WY | Physical and verbal harassment. | 2011 | $60,000 | 1 | K12 | |
| University of Missouri | Discrimination + | 2015 | Loss of 25% enrollment | -- | Higher Ed | |
| Ubiquiti Networks Inc. | Data breach - Spear Phishing | 2015 | $46,700,00 | -- | IT | |
| University of Kentucky | Religious Discrimination | 2011 | $125,000 | 1 | Higher Ed | |
| Shoreline School District, WA | Sexual assault. | 2011 | $160,000 | 1 | K12 | |
| Rochester School Board, Minnesota | Physical assault. | 2011 | $87,500 | 1 | K12 | |
| Anoka-Hennepin School District, Minnesota | Anti-gay harassment, including assaults | 2011 | $770,000 | 6 | K12 | |
| Ubiquity Networks Inc | Data breach - Spear Phishing | 2015 | $46,700,000 | -- | IT | |
| Red Wing Public Schools, Minnesota | Racial harassment. | 2011 | $90,000 | Class Action | K12 | |
| Cooper University Hospital | Unsafe Work Conditions | 2016 | $55,000 | 15 | Healthcare | |
| Carl Junction School Districts | wrongful death lawsuits | 2015 | $300,000 | 1 | K12 | |
| Menifee Union School District, CA | Physical and verbal harassment. | 2011 | $25,000 | 2 | K12 | |
| General Hospital Corp./Massachusetts General Physicians Organization (Boston) | HIPAA Violation | 2011 | $1,000,000 | -- | Healthcare | |
| State of Hawaii | Sexual assault and harassment. | 2011 | $5,750,000 | Class Action | K12 | |
| New York University | Racial Harassment | 2011 | $210,000 | 1 | Higher ED |
* Post-incident report links can be provided upon request.