around March 15 , 2012 , UPS working on behalf of the company misdirected a package containing a customer 's credit card application ( including social security number ) to the address of an unaffiliated business – drugstore.com . The air was immediately realized and the package along with its entire contents was returned to the company . Although the package was opened upon its mistaken delivery , the company does not believe that the information was misused or otherwise compromised . ;