July 10, 2015

Steve C. Lee, Acting Director

Division of Consumer Affairs
Office of the Attorney General
P.O. Box 45025
Newark, New Jersey 07101
Dear Mr. Lee:
Via Bamboozled: Breakwater Beach security breach puts hundreds of employee documents online by Karin
Price Mueller, NJ Advance Media for NJ.com, July 9, 2015 (hard copy attached):
Hundreds of documents containing personal information of some employees at Jenkinson's Breakwater Beach
Waterpark at Casino Pier in Seaside Heights have been available online to anyone who clicks in the right place,
Bamboozled has learned.
The documents include copies of Social Security cards, driver's licenses, birth certificates, passports, student IDs, tax
forms, seasonal work agreements, minor consent forms and employment eligibility forms from the Department of
Homeland Security.
The employee information was stored on a company web site that apparently wasn't protected by password entry.
Documents viewed by Bamboozled included both applicants and hires from the 2014 and 2015 seasons, while the
company insists only 2015 data was available. The site's main index file, which is how the documents were accessed,
dates back to 2010.
A review of the documents shows the majority of those affected are seasonal employees, and most are teenagers or
young adults from towns across New Jersey. Some were teens who applied for jobs but were never hired. Other
employees came from overseas, including some from China, Ireland, Bulgaria, Lithuania and others, records show.
In essence, the personally identifiable information, or PII, reveals everything anyone would need to apply for loans,
credit cards or even fake passports and driver's licenses.
"In a word, 'Wow,'" said Mitch Feather of Creative Associates, a Madison-based cybersecurity firm after reviewing
the web site. "This is a case that everything is here for somebody to do an impersonation."
We reached out to some of those whose information may have been breached.
"I'm nervous and I'm upset about it," said Brianna Burke, 18, of Forked River. "Now that I'm about to apply for
student loans, I'm worried about my credit. The fact that someone could be ruining my life right now is
disheartening."
Burke had applied for the job but was never hired, yet her information was on the site.
Darren Hook of Toms River has two children who work in food services at the park.
"You go and do something innocent like go and try to find a job and this kind of thing happens? It makes you feel
vulnerable," he said. "There should be something in place that protects your information."

This is to respectfully request that your office review the entire Bamboozled article; investigate these
matters in order to determine if any laws have been violated; and to provide me with the results.
Thank you for your consideration and I look forward to your reply.
Sincerely,

Peter M. Heimlich
3630 River Hollow Run
Peachtree Corners, GA 30096
ph: (208)474-7283
e-mail: Peter.Heimlich@gmail.com
website: http://medfraud.info
blog: http://the-sidebar.com