NOTICE OF DATA BREACH

Transcription

1 April 18, 2017 «First_Name» «Last_Name» «Hme_Address_1» «Hme_Address_2» «Hme_City», «Hme_State» «Hme_Zip» «Hme_Cuntry» Dear «First_Name» «Last_Name»: NOTICE OF DATA BREACH We are writing t fllw up n an we recently sent yu abut an issue that may have affected yur persnal infrmatin. What Happened? Equifax Wrkfrce Slutins (aka TALX), ur W-2 nline prtal prvider, recently cnfirmed that an unauthrized third party(ies) gained access t its prtal during varius time perids frm April 18, 2016 thrugh March 29, 2017, and may have accessed yur persnal infrmatin and dwnladed a cpy f yur 2016 W-2 frm. What Infrmatin Was Invlved? The persnal infrmatin that may have been accessed includes yur name, address, wrk address, wrk phne number, Scial Security number, emplyer identificatin number, and wage and tax infrmatin, as well as any persnal phne number, persnal address, r answers t custmized security questins that yu may have entered n the W-2 nline prtal. What We Are Ding Prmptly after cnfirming the incident, we wrked with Equifax t determine the details f the issue. We als disabled nline access t the W-2 nline prtal fr all lg-in methds ther than Single Sign On, which is available nly frm the Nrthrp Grumman netwrk. If yu need yur W-2 frm, please cntact the Nrthrp Grumman Emplyee Service Center at SERVENG ( ) and we will prvide it t yu. Nrthrp Grumman and Equifax are crdinating with law enfrcement authrities t assist them in their investigatin f recent incidents invlving unauthrized actrs gaining access t individuals persnal infrmatin thrugh the W-2 nline prtal. What Yu Can D We regret that this incident may affect yu. We take ur bligatin t safeguard persnal infrmatin very seriusly and are alerting yu abut this incident s yu can take steps t help prtect yurself. Yu are entitled under U.S. law t ne free credit reprt annually frm each f the three natinwide cnsumer reprting agencies. T rder yur free credit reprt, visit r call tll-free at We encurage yu t remain vigilant by reviewing yur accunt statements and mnitring yur free credit reprts. In additin, we have arranged with Equifax t ffer yu three years f ID Patrl identity theft prtectin services at n cst t yu. The deadline t register fr these services is December 31, The attached Reference Guide prvides infrmatin n registratin and recmmendatins n the prtectin f persnal infrmatin. Fr Mre Infrmatin We hpe this infrmatin is useful t yu. If yu have any questins regarding this issue, please call the Nrthrp Grumman Emplyee Service Center at SERVENG ( ). 1

2 Sincerely, Jhn W. Krpf Privacy Executive «AddressBlck» 2

3 Reference Guide We encurage yu t take the fllwing steps t prtect yur persnal infrmatin: Cntact the IRS. If yu suspect yu are a victim f tax-related identity theft, please cnsider taking the fllwing steps: Cmplete IRS Frm 14039, Identity Theft Affidavit, available at Once yu have fully cmpleted the frm, print it and submit it t the IRS accrding t the instructins n the frm. Visit r fr mre infrmatin abut taxrelated identify theft and steps yu can take t prtect yurself. Cntact the IRS at fr additinal infrmatin. Cntact yur State Tax Agency. Infrmatin n hw t cntact yur state tax agency is available at Order Yur Free Credit Reprt. T rder yur free credit reprt, visit call tll-free at , r cmplete the Annual Credit Reprt Request Frm n the U.S. Federal Trade Cmmissin s ( FTC ) website at and mail it t Annual Credit Reprt Request Service, P.O. Bx , Atlanta, GA The three cnsumer reprting agencies prvide free annual credit reprts nly thrugh the website, tll-free number r request frm. When yu receive yur credit reprt, review it carefully. Lk fr accunts yu did nt pen. Lk in the inquiries sectin fr names f creditrs frm whm yu have nt requested credit. Sme cmpanies bill under names ther than their stre r cmmercial names. The cnsumer reprting agency will be able t tell yu when that is the case. Lk in the persnal infrmatin sectin fr any inaccuracies in yur infrmatin (such as hme address and Scial Security number). If yu see anything yu d nt understand, call the cnsumer reprting agency at the telephne number n the reprt. Errrs in this infrmatin may be a warning sign f pssible identity theft. Yu shuld ntify the cnsumer reprting agencies f any inaccuracies in yur reprt, whether due t errr r fraud, as sn as pssible s the infrmatin can be investigated and, if fund t be in errr, crrected. If there are accunts r charges yu did nt authrize, immediately ntify the apprpriate cnsumer reprting agency by telephne and in writing. Cnsumer reprting agency staff will review yur reprt with yu. If the infrmatin cannt be explained, then yu will need t call the creditrs invlved. Infrmatin that cannt be explained als shuld be reprted t yur lcal plice r sheriff s ffice because it may signal criminal activity. Register fr Identity Theft Prtectin Services. We have arranged with Equifax t prvide three years f ID Patrl identity theft prtectin services at n cst t yu. The deadline t register fr these services is December 31, If yu chse t take advantage f these services, yu will receive ntificatins f any changes t yur credit infrmatin, $1 millin identity fraud expense cverage, and access t yur credit reprt. T register: Please visit: Insert yur persnal ID Patrl Cde: «Cde» The registratin prcess invlves fur steps, including identity authenticatin, which requires yu t answer questins regarding yur credit file befre the ID Patrl identity theft prtectin services may be activated. Reprt Incidents. If yu detect any unauthrized transactins in a financial accunt, prmptly ntify yur payment card cmpany r financial institutin. If yu detect any incident f identity theft r fraud, prmptly reprt the incident t law enfrcement, the FTC and yur state Attrney General. If yu believe yur identity has been stlen, the FTC recmmends that yu take these steps: Clse the accunts that yu have cnfirmed r believe have been tampered with r pened fraudulently. Use the FTC s ID Theft Affidavit (available at when yu dispute new unauthrized accunts. 3

4 File a lcal plice reprt. Obtain a cpy f the plice reprt and submit it t yur creditrs and any thers that may require prf f the identity theft crime. Yu can cntact the FTC t learn mre abut hw t prtect yurself frm becming a victim f identity theft and hw t repair identity theft: Federal Trade Cmmissin Cnsumer Respnse Center 600 Pennsylvania Avenue, NW Washingtn, DC IDTHEFT ( ) Cnsider Placing a Fraud Alert n Yur Credit File. T prtect yurself frm pssible identity theft, cnsider placing a fraud alert n yur credit file. A fraud alert helps prtect yu against the pssibility f an identity thief pening new credit accunts in yur name. When a merchant checks the credit histry f smene applying fr credit, the merchant gets a ntice that the applicant may be the victim f identity theft. The alert ntifies the merchant t take steps t verify the identity f the applicant. Yu can place a fraud alert n yur credit reprt by calling any ne f the tll-free numbers prvided belw. Yu will reach an autmated telephne system that allws yu t flag yur file with a fraud alert at all three cnsumer reprting agencies. Fr mre infrmatin n fraud alerts, yu als may cntact the FTC as described abve. Equifax Experian TransUnin Equifax Credit Infrmatin Services, Inc. P.O. Bx Atlanta, GA Experian Inc. P.O. Bx 9554 Allen, TX TransUnin LLC P.O. Bx 2000 Chester, PA Cnsider Placing a Security Freeze n Yur Credit File. Yu may wish t place a security freeze (als knwn as a credit freeze ) n yur credit file. A security freeze is designed t prevent ptential creditrs frm accessing yur credit file at the cnsumer reprting agencies withut yur cnsent. There may be fees fr placing, lifting, and/r remving a security freeze, which generally range frm $5-$20 per actin. Unlike a fraud alert, yu must place a security freeze n yur credit file at each cnsumer reprting agency individually. Fr mre infrmatin n security freezes, yu may cntact the three natinwide cnsumer reprting agencies r the FTC as described abve. As the instructins fr establishing a security freeze differ frm state t state, please cntact the three natinwide cnsumer reprting agencies t find ut mre infrmatin. The cnsumer reprting agencies may require prper identificatin prir t hnring yur request. Fr example, yu may be asked t prvide: Yur full name with middle initial and generatin (such as Jr., Sr., II, III) Yur Scial Security number Yur date f birth Addresses where yu have lived ver the past five years A legible cpy f a gvernment-issued identificatin card (e.g., a state driver s license r military ID card) Prf f yur current residential address (such as a current utility bill r accunt statement) Fr Maryland Residents. Yu may btain infrmatin abut preventing and aviding identity theft frm the Maryland Office f the Attrney General at: 4

5 Maryland Office f the Attrney General Cnsumer Prtectin Divisin 200 St. Paul Place Baltimre, MD (888) (tll-free in Maryland) (410) Fr Massachusetts Residents. Yu have the right t btain a plice reprt and request a security freeze as described abve. The cnsumer reprting agencies may charge yu a fee f up t $5 t place a security freeze n yur accunt, and may require that yu prvide certain persnal infrmatin (such as yur name, Scial Security number, date f birth, and address) and prper identificatin (such as a cpy f a gvernment-issued ID card and a bill r statement) prir t hnring yur request. There is n charge, hwever, t place, lift r remve a security freeze if yu have been a victim f identity theft and yu prvide the cnsumer reprting agencies with a valid plice reprt. Fr Nrth Carlina Residents. Yu may btain infrmatin abut preventing and aviding identity theft frm the Nrth Carlina Office f the Attrney General at: Nrth Carlina Attrney General s Office 9001 Mail Service Center Raleigh, NC (877) (tll-free in Nrth Carlina) (919) Fr Oregn Residents. We encurage yu t reprt suspected identity theft t law enfrcement, including the FTC and the Oregn Office f the Attrney General at: Oregn Department f Justice 1162 Curt Street NE Salem, OR (877) (tll-free in Oregn) (503) Fr Rhde Island Residents. Yu may btain infrmatin abut preventing and aviding identity theft frm the Rhde Island Office f the Attrney General at: Rhde Island Office f the Attrney General Cnsumer Prtectin Unit 150 Suth Main Street Prvidence, RI (401) Yu have the right t btain a plice reprt and request a security freeze as described abve. The cnsumer reprting agencies may charge yu a fee f up t $10 t place a security freeze n yur accunt, and may require that yu prvide certain persnal infrmatin (such as yur name, Scial Security number, date f birth, and address) and prper identificatin (such as a cpy f a gvernment-issued ID card and a bill r statement) prir t hnring yur request fr a security freeze. There is n charge, hwever, t place, lift r remve a security freeze if yu have been a victim f identity theft and yu prvide the cnsumer reprting agencies with a valid plice reprt. 5