Australia does not yet have mandatory data breach notification laws (see last year’s ALRC proposals) but in the USA where many states do have such laws, the Identity Theft Resource Center reports that in 2008 there were 656 breaches from a range of well-known U.S. companies and
government entities. Information about the breaches was collected by tracking
media reports and the disclosures companies are required to make by
law. (via InfoWorld).

The data breaches came from a variety of mishaps, including theft of laptops, hacking, employees improperly handling data, accidental disclosure and problems with subcontractors.

In Australia the Privacy Commissioner has issued a Voluntary Data Breach Notification Guide.