AIG SPECIALTY INSURANCE COMPANY (a capital stock company, herein called the Insurer, we, us or our) 175 Water St., New York, NY 10038

Transcription

1 AIG SPECIALTY INSURANCE COMPANY (a capital stock company, herein called the Insurer, we, us or our) 175 Water St., New York, NY NOTICE: THIS INSURER IS NOT LICENSED IN THE STATE OF NEW YORK AND IS NOT SUBJECT TO ITS SUPERVISION NOTICE: THE LIMITS OF INSURANCE AVAILABLE TO PAY LOSS UNDER COVERAGE A. SHALL BE REDUCED BY AMOUNTS INCURRED FOR LEGAL COSTS UNDER COVERAGE A. PERSONAL INTERNET AND IDENTITY COVERAGE DECLARATIONS Policy Number: Master Policyholder: Identity Theft Guard Solutions, LLC DBA ID Experts 2. Address: SW Greenburg Road, Suite 570 Portland, OR Insured: See Membership Endorsement #4 4. Policy Period: From: 01/01/2016 To: 01/01/2017 (12:01 A.M. standard time at the address of the master policyholder) 5. Premium Rate: See Membership Endorsement #4 6. Deductible: $0 7. Quarterly Minimum Premium: N/A 8. Deposit Premium (non-refundable): $ Aggregate Limit and Sublimits of Insurance for each Insured: Aggregate Limit See Membership Endorsement #4 Sublimits of Insurance: See Membership Endorsement # (8/08) All rights reserved.

2 10. Endorsements attached at issuance: 1. Economic Sanctions 2. Coverage Territory 3. Residents Endorsement 4. Membership Endorsement 5. Family Plan Endorsement 6. Discovery Trigger Endorsement 7. Cancellation Endorsement 8. PIC Amendatory Endorsement 9. UEFT Endorsement 10.Policy Termination Endorsement AUTHORIZED REPRESENTATIVE (8/08) All rights reserved.

3 PERSONAL IIDENTIITY COVERAGE NOTICE: THE LIMITS OF INSURANCE AVAILABLE TO PAY LOSS UNDER THIS POLICY SHALL BE REDUCED BY AMOUNTS INCURRED FOR LEGAL COSTS UNDER THIS POLICY. This policy provides coverage through a master policy with benefits to insureds. Please read the entire policy to determine the master policyholder s and the insured s rights and duties and what is and what is not covered under this policy. Terms appearing in bold face have special meaning and are defined in the Definitions Section. In consideration of the premium paid and in reliance upon the master policyholder s statements to us, we agree to provide to the insured the insurance described in this policy. I. INSURING AGREEMENT We shall pay the insured for loss, excess of any applicable deductible, resulting from stolen identity events first occurring during the policy period and reported to us within six (6) months of a stolen identity event. II. DEFINITIONS A. Business means any employment, trade, hobby, profession or occupation. B. Computer attack means receipt or transmission of malicious code, unauthorized access or unauthorized use, whether intentional or unintentional, hostile or otherwise and regardless of whether the perpetrator is motivated for profit, which results in copying, misappropriation or transmission of personal information pertaining to an insured. C. Computer system means computer hardware, software, firmware, including electronic data stored thereon, which are linked together through a network of two or more computers, including such networks accessible through the Internet. Computer system shall also include network infrastructure, input, output, processing, storage and off-line media libraries, as well as those written policies and procedures applicable to the security of a computer network. D. Costs means the following reasonable and necessary costs incurred by the insured as a result of a stolen identity event: a. cost of re-filing rejected applications for loans, grants or other credit instruments; (8/08) All rights reserved. 1

4 PERSONAL IDENTITY COVERAGE b. cost of notarizing affidavits or other similar documents, long distance telephone calls and postage incurred by the insured in order to report a stolen identity event and/or amend or rectify records as to the insured s true name or identity; c. cost of up to six credit reports from established credit bureaus (with no more than two reports from any one credit bureau); d. costs approved by us, for providing periodic reports on changes to, and inquiries about the information contained in the insured s credit reports or public databases (including, but not limited to credit monitoring services); e. cost of travel within the United States incurred as a result of the insured s efforts to amend or rectify records as to the insured s true name and identity; and f. costs for elder care or child care incurred as a result of the insured s efforts to amend or rectify records as to the insured s true name or identity. E. Insured means each natural person on record with us as enrolled in a membership program of the master policyholder at the time of a stolen identity event. F. Legal Defense Fees and Expenses means the reasonable and necessary fees and expenses incurred by the insured with our consent for an attorney approved by us including: a. An initial consultation with a lawyer to determine the severity of and appropriate response to a stolen identity event; b. Defending any suit brought against the insured by a creditor, collection agency or other entity acting on behalf of a creditor for non-payment for goods or services or default on a loan solely as a result of a stolen identity event; c. Removing any civil judgment wrongfully entered against the insured solely as a result of a stolen identity event; and d. Defending criminal charges brought against the insured as a result of a stolen identity event; provided, however, we will only pay criminal defense related fees and expenses after it has been established that the insured was not in fact the perpetrator. G. Loss means the reasonable and necessary costs, lost wages, legal defense fees and expenses incurred within twelve months of an insured s discovery of a stolen identity event and incurred within the United States of America. H. Lost Wages means actual lost wages that would have been earned for time reasonably and necessarily taken off work and away from the insured s work premises, whether partial or whole days, solely as a result of the insured s efforts to amend or rectify records as to the insured s true name or identity as a result of a stolen identity event. Actual lost wages includes remuneration for vacation days, discretionary days, floating holidays, and paid personal days and excludes business interruption or future earnings of a self-employed professional. Computation of lost wages for self-employed persons must be supported by, and will be based on, prior year tax returns. I. Master policyholder means the entity first specified in Item 1 in the Declarations (8/08) 2 All rights reserved.

5 PERSONAL IDENTITY COVERAGE J. Membership Program means each program sponsored by the master policyholder and specifically listed by endorsement as covered programs under this policy. K. Personal information means (i) non-public information from which an individual may be uniquely and reliably identified or contacted; (ii) information concerning an individual that would be considered nonpublic personal information within the meaning of Title V of the Gramm-Leach-Bliley Act of 1999 (Public Law , 113 Stat 1338); and (iii) information concerning an individual that would be considered protected health information within the Health Insurance Portability and Accountability Act of 1996 (as amended) and its implementing regulations. Personal information includes, without limitation, an individual s social security number, account numbers, account balances, account histories and passwords. L. Policy means this policy and any endorsement attached hereto, together with the application with any attachments thereto. M. Policy period means the period commencing on the effective date specified in Item 4 of the Declarations. This period ends on the expiration date specified in Item 4 of the Declarations or, in the event of cancellation or non-renewal of this policy, then the date specified in such cancellation or non-renewal notice. N. Self-employed person means a person who owns or operates his or her own business and whose primary income is earned from such business. O. Stolen identity event means the theft of the insured s personal information, which has resulted or could reasonably result in the wrongful use of such information. All loss resulting from stolen identity event(s) and arising from the same, continuous, related or repeated acts shall be treated as arising out of a single stolen identity event occurring at the time of the first such stolen identity event. Stolen identity event shall not include the theft or wrongful use of the insured s business name, d/b/a or any other method of identifying any business activity of the insured. P. Suit means a civil proceeding seeking money damages that is commenced by the service of a complaint or similar pleading. Q. Unauthorized access means the gaining of access to a computer system by an unauthorized person(s) or by an authorized person(s) in an unauthorized manner. R. Unauthorized use means the use of a computer system by an unauthorized person(s) or by an authorized person(s) in an unauthorized manner. S. We, us and our mean the insurance company providing this policy. III. OBLIGATIONS OF THE MASTER POLICYHOLDER (8/08) 3 All rights reserved.

6 PERSONAL IDENTITY COVERAGE As a condition precedent to coverage under this policy, the master policyholder shall at all times have the duties and obligations set forth in this section. These duties and obligations are in addition to any obligations of the insured otherwise provided for under this policy. The master policyholder shall: A. allow us to examine and audit all of the master policyholder s records that relate to this policy. We may conduct the audits during regular business hours during the policy period and within three years after the policy period ends; B. promptly advise us and any potentially affected insured of a computer attack that may have resulted in the unauthorized computer access of personal identity information pertaining to an insured; C. take all reasonable steps to use, design, maintain and upgrade its network and computer system security and to minimize computer attacks of its network and computer system; D. reasonably inform the insured of its rights and obligations under this policy in a form approved by us; E. submit to us for our review and approval any informational materials developed by the master policyholder with respect to the policy or policy benefits. This shall specifically include, but not be limited to, any materials that refer, directly or indirectly, to Chartis Inc., or the existence of the policy issued to the master policyholder; F. comply with all applicable privacy laws and regulations including, without limitation, all laws and regulations relating to the collection, maintenance and dissemination of personal information; G. pay applicable premium and not charge any insured an itemized, separate fee for receiving the policy benefits. IV. OBLIGATIONS OF THE INSURED As a condition precedent to coverage under this policy, the insured shall have the following duties and obligations at all times. These duties and obligations are in addition to any obligations of the master policyholder otherwise provided for under this policy: A. If a stolen identity event occurs, the insured shall: Promptly, but no later than six (6) months after a stolen identity event occurs, notify us of such stolen identity event by calling the telephone number provided in the insured s Summary Description of Benefits, or contacting us at Chartis Claims, Inc., 175 Water Street, New York, NY The insured shall follow our written instructions to mitigate potential loss, which will be provided to the insured in a claims kit and which will include the prompt notification of the major credit bureaus, the (8/08) 4 All rights reserved.

7 PERSONAL IDENTITY COVERAGE Federal Trade Commission s Identity Theft Hotline and appropriate law enforcement agencies. B. If a loss occurs, the insured shall also: 1. Promptly notify us of the loss, submit to us the written proof of loss provided to the insured in a claims kit, and provide any other reasonable information or documentation that we may request; 2. Take all reasonable steps to mitigate loss resulting from a stolen identity event including, but not limited to, requesting a waiver of any applicable fees including loan application fees or credit bureau fees; 3. File a report with the police or appropriate law enforcement authority, and 4. Provide all assistance and cooperation we may require in the investigation and determination of any loss, including but not limited to: a. Immediately forwarding to us any notices, summons or legal papers received by the insured in connection with a loss or the theft of personal information; b. Authorizing us to obtain records and other information with regard to any loss including permitting us to inspect the insured s books and records; c. Cooperating with and helping us to enforce any legal rights the insured or we may have against anyone who may be liable to the insured; d. Attending depositions, hearings and trials, securing and giving evidence, and obtaining the attendance of witnesses with regard to any loss; or e. Answering our questions under oath at such times as may be reasonably required about any matter relating to this policy or the insured s loss. In such event, the insured s answers under oath shall be signed. V. EXCLUSIONS This policy shall not apply to any loss arising directly or indirectly out of the following: A. Dishonest Acts Any dishonest, criminal, malicious or fraudulent acts if the insured that suffered a loss personally participated in, directed, or had knowledge of such acts. B. Bodily Injury Any physical injury, sickness, disease, disability, shock, mental anguish, and mental injury, including, required care, loss of services or death at any time resulting therefrom (8/08) 5 All rights reserved.

8 PERSONAL IDENTITY COVERAGE C. War Strikes or similar labor action, war (whether declared or not), or any act or condition incident to war. War includes civil war, insurrection, act of foreign enemy, civil commotion, factional civil commotion, military or usurped power, rebellion, revolution, invasion, hostilities or warlike operations or mutiny. D. Pollution The presence of or the actual, alleged or threatened discharge, dispersal, release or escape of pollutants (including nuclear materials), or any direction or request to test for, monitor, clean up, remove, contain, treat, detoxify or neutralize pollutants, or in any way respond to or assess the effects of pollutants. E. Late Reporting Any loss reported to us more than six (6) months after a stolen identity event occurs. VI. LIMITS OF INSURANCE A. The aggregate limit of insurance specified in Item 9 of the Declarations is the most we shall pay the insured for loss, excess of any applicable deductible, resulting from all stolen identity events combined first occurring during the policy period. B. All loss arising out of the same, continuous, related or repeated stolen identity events shall be subject to the terms, conditions, exclusions and single Aggregate Limit of Insurance in effect at the time the first such stolen identity event occurs. C. The maximum we shall pay per insured for an initial consultation with a lawyer shall not exceed the amount for initial legal consultation as specified in Item 9 of the Declarations. ALL LEGAL DEFENSE FEES AND EXPENSES ARE PART OF, AND NOT IN ADDITION TO, THE AGGREGATE LIMIT OF INSURANCE FOR EACH INSURED. D. The maximum we shall pay per insured for lost wages shall not exceed the amount per week for lost wages and the maximum number of weeks as specified in Item 9 of the Declarations. The amount per week for lost wages is a sublimit of the Aggregate Limit of Insurance for each insured and, as such, is part of, and not in addition, to the Aggregate Limit of Insurance for each insured. E. The maximum we shall pay per insured for travel shall not exceed the amount for travel expenses as specified in Item 9 of the Declarations. This amount is a sublimit of the Aggregate Limit of Insurance for each insured and, as such, is part of and not in addition to, the Aggregated Limit of Insurance for each insured. F. The maximum we shall pay per insured for elder care and child care shall not exceed the amount for elder care and child care as specified in Item 9 of the Declarations. This amount is a sublimit of the Aggregate Limit of Insurance for each insured and, as such, is part of and not in addition to, the Aggregate Limit of Insurance for each insured (8/08) 6 All rights reserved.

9 PERSONAL IDENTITY COVERAGE VII. DEDUCTIBLE A. The insured shall be responsible for the applicable deductible amount specified in Item 6 of the Declarations and the insured may not insure against it. B. Regardless of the number of covered stolen identity events first occurring during the policy period each insured shall be responsible for only a single deductible during any one policy period. VIII. POLICY CONDITIONS A. Coverage Territory Subject to its terms, conditions and exclusions, this policy applies to a stolen identity event occurring anywhere in the world, but we shall only pay for loss incurred in the United States. B. Legal Action Against Us No legal action may be brought or made against us under this policy unless: 1. There has been full compliance with all of the terms of this policy; and 2. The action is brought within two (2) years after the date on which a stolen identity event occurred. C. Concealment, Misrepresentation or Fraud This policy shall be void if the master policyholder intentionally conceals or misrepresents a material fact concerning this policy. In addition, this policy shall also be void for any one insured if that insured intentionally conceals or misrepresents a material fact concerning: 1. A stolen identity event; 2. The insured s interest in any property involved in a loss; or 3. A loss under this policy. D. Bankruptcy The bankruptcy or insolvency of the insured or the insured s estate shall not relieve us of any obligation under this policy. E. Titles of Paragraphs Titles of paragraphs are inserted solely for convenience of reference and shall not be deemed to limit, expand or otherwise affect the provisions to which they relate (8/08) 7 All rights reserved.

10 PERSONAL IDENTITY COVERAGE F. Transfers of Rights of Recovery Against Others to Us If any person for whom we make payment under this policy has rights to recover from another, those rights are transferred to us to the extent of our payment. That person shall do everything necessary to secure our rights and shall do nothing after loss to impair them. The insured may, however, waive the insured s rights of recovery in writing before a loss occurs. G. Other Insurance 1. We shall be excess over any other insurance (including, without limitation, homeowner s or renter s insurance), product warranty, extended services agreement or contract. If the insured has other insurance that applies to a loss under this policy, the other insurance shall pay first. This policy applies to the amount of loss that is in excess of: a. The Limit of Insurance of the insured s other insurance; and b. The total of all the insured s deductibles and self-insured amounts under all such other insurance. 2. In all events, we shall not pay more than our Limit of Insurance specified in Item 9 of the Declarations. H. Duplicate Coverages Should the insured be enrolled in more than one membership program insured by us or any of our affiliates, subject to the applicable deductibles and limits of insurance of the insured under the applicable membership program, we will reimburse the insured under each membership program, but in no event shall the total amount reimbursed to the insured under all membership programs exceed the actual amount of loss. I. Conformance To Statute To the extent a term of this policy conflicts with a statute of the State within which this policy is issued, the term shall be deemed amended so as to conform to the statute. J. Assignment This policy and all rights provided by this insurance are not assignable without our written consent. K. Changes Changes to the provisions of this policy shall be made only by endorsement issued by us and made a part of this policy. L. Litigation The master policyholder shall promptly advise us of the material facts of (i) any pending or threatened investigation with respect to the policy by a governmental agency or authority, (ii) any complaint filed against the parties with respect to the (8/08) 8 All rights reserved.

11 PERSONAL IDENTITY COVERAGE policy by any governmental agency or authority or (iii) any pending or threatened litigation against the master policyholder or us with respect to the policy. The master policyholder shall also promptly advise us of the material facts of any pending or threatened litigation, or the existence of any criminal indictment or conviction against the master policyholder or its senior management, which could adversely affect the policy or either the master policyholder s or our ability to perform obligations under this policy. M. Proprietary Rights Except as provided herein, this policy does not confer upon either party any interest in or right to use any trademark, service mark or other intellectual property right of the other party hereto or its affiliates (collectively referred to as such party s Intellectual Property Rights ) in connection with the policy or for any other purpose unless a party receives the prior written consent of the other party hereto, which consent may be granted or withheld in a party s sole discretion. Upon termination of this policy each party shall immediately cease and discontinue all use of the other party s Intellectual Property Rights. In no event may any party or any affiliated person or entity utilize any other party s Intellectual Property Rights in connection with any products or services other than the policy. IX. Policy Termination A. This policy shall terminate on the expiration date specified in Item 4 of the Declarations or, in the event of cancellation or non-renewal of this policy, the date specified in such notice of cancellation or non-renewal. There shall be no coverage for any stolen identity event occurring after the effective date and time of such expiration, cancellation or non-renewal. Termination of this policy shall not reduce or eliminate the six (6) month period in which the insured must report to us a stolen identity event. B. If we cancel or non-renew this policy, we shall mail or deliver written notice to the master policyholder at the mailing address shown in Item 2 of the Declarations stating the effective date of such cancellation or non-renewal. If notice is mailed, proof of mailing shall be sufficient proof of notice. C. We may cancel or non-renew this policy by mailing or delivering to the master policyholder written notice at least: 1. Twenty (20) days before the effective date of cancellation if we cancel for nonpayment of premium; or 2. Forty-five (45) days before the effective date of non-renewal or cancellation, if we cancel for any other reason. At our sole and absolute discretion, we may extend this policy on the same terms and rates beyond the expiration date set forth in Item 4 of the Declarations for such period as is necessary for us to comply with this paragraph. The policy period shall end on the effective date specified in the cancellation or nonrenewal notice (8/08) 9 All rights reserved.

12 PERSONAL IDENTITY COVERAGE D. The master policyholder may cancel this policy by mailing or delivering to us advance written notice of cancellation setting forth the date and time thereafter during the policy period on which the cancellation shall be effective. In such case, the master policyholder shall return the policy or a properly executed Lost Policy Release by mail or delivery to us within seven (7) days of the effective date of cancellation. X. CANCELLATION OF MEMBERSHIP After the cancellation, termination or expiration of the insured s individual membership in the membership program, any coverage under this policy for that insured is terminated and there shall be no coverage for that insured for any stolen identity event occurring after the effective date and time of such termination. IN WITNESS WHEREOF, we have caused this policy to be signed by our President and Secretary and signed on the Declarations page by our duly authorized representative (8/08) 10 All rights reserved.

13 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company ENDORSEMENT #1 ECONOMIC SANCTIONS ENDORSEMENT This endorsement modifies insurance provided under the following: The Insurer shall not be deemed to provide cover and the Insurer shall not be liable to pay any claim or provide any benefit hereunder to the extent that the provision of such cover, payment of such claim or provision of such benefit would expose the Insurer, its parent company or its ultimate controlling entity to any sanction, prohibition or restriction under United Nations resolutions or the trade or economic sanctions, laws or regulations of the European Union or the United States of America. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE

14 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company It is agreed: COVERAGE TERRITORY ENDORSEMENT No. 2 The policy is amended to provide the following: I. Clause VIII, POLICY CONDITIONS, Item A of the Policy is deleted in its entirety and replaced with the following : A: Coverage Territory Subject to its terms, conditions and exclusions, this policy applies to a stolen identity event occurring anywhere in the world, but we shall only pay for loss incurred in the United States, its territories or possessions. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE

15 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company RESIDENT ENDORSEMENT #3 POLICY MODIFICATIONS This policy as issued is amended as follows: Coverage does not apply to residents of the state of New York. All other terms and conditions remain unchanged. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE Page 1 of 1

16 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company MEMBERSHIP ENDORSEMENT #4 It is hereby understood and agreed that Item 5, Item 6 and Item 9 of the Declarations are replaced with the following: Item 5. Premium Rate (monthly rate per Insured for Coverage Agreement A): Membership Program Per Individual Member Per Family Plan Participant Coverage B-UEFT Coverage $20,000-Standard $ $ NO $30,000-Standard $ $ NO $20,000-UEFT Added $ $ YES $30,000-UEFT Added $ $ YES $1,000,000-UEFT Added $ $ YES Item 6. Deductible: Membership Program Deductible Per Member $20,000-Standard $0 $30,000-Standard $0 $20,000-UEFT Added $0 $30,000-UEFT Added $0 $1,000,000-UEFT Added $0 Item 9. Aggregate Limit and Sublimits of Insurance for each Insured: Membership Program Aggregate Lost Wages Initial Legal Travel Elder Care Limit Per Week Max Weeks Consultation Expense s and Child Care $20,000-Standard $ 20,000 $ 5,000 4 Wks. $1,000 $2,000 $ 2,000 $30,000-Standard $ 30,000 $ 7,500 4 Wks. $1,000 $2,000 $ 2,000 $20,000-UEFT Added $ 20,000 $ 5,000 4 Wks. $1,000 $2,000 $ 2,000 $30,000-UEFT Added $ 30,000 $ 7,500 4 Wks. $1,000 $2,000 $ 2,000 $1,000,000-UEFT Added $1,000,000 $ 7,500 4 Wks. $1,000 $2,000 $ 2,000 Membership Program Aggregate Limit Certified Public Accountant Costs $20,000-Standard $ 20,000 $ 1,000 $30,000-Standard $ 30,000 $ 1,000 $20,000-UEFT Added $ 20,000 $ 1,000 $30,000-UEFT Added $ 30,000 $ 1,000 $1,000,000-UEFT Added $1,000,000 $ 1,000 Membership Endorsement (08/08)

17 ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE

18 This endorsement, effective at 12:01 AM 04/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company MEMBERSHIP ENDORSEMENT #13 It is hereby understood and agreed that Membership Endorsement #4 is deleted and replaced with this Membership Endorsement I. II It is hereby understood and agreed that Item 5, Item 6 and Item 9 of the Declarations are replaced with the following: Item 5. Premium Rate (monthly rate per Insured for Coverage Agreement A): Membership Program Per Individual Member Per Family Plan Participant Coverage B-UEFT Coverage $20,000-Standard $ $ NO $30,000-Standard $ $ NO $20,000-UEFT Added $ $ YES $30,000-UEFT Added $ $ YES $1,000,000-UEFT Added $ $ YES Item 6. Deductible: Membership Program Deductible Per Member $20,000-Standard $0 $30,000-Standard $0 $20,000-UEFT Added $0 $30,000-UEFT Added $0 $1,000,000-UEFT Added $0 Membership Endorsement (08/08)

19 Item 9. Aggregate Limit and Sublimits of Insurance for each Insured: Membership Program Aggregate Lost Wages Initial Legal Travel Elder Care Limit Per Week Max Weeks Consultation Expense s and Child Care $20,000-Standard $ 20,000 $ 5,000 4 Wks. $1,000 $2,000 $ 2,000 $30,000-Standard $ 30,000 $ 7,500 4 Wks. $1,000 $2,000 $ 2,000 $20,000-UEFT Added $ 20,000 $ 5,000 4 Wks. $1,000 $2,000 $ 2,000 $30,000-UEFT Added $ 30,000 $ 7,500 4 Wks. $1,000 $2,000 $ 2,000 $1,000,000-UEFT Added $1,000,000 $ 7,500 4 Wks. $1,000 $2,000 $ 2,000 Membership Program Aggregate Limit Certified Public Accountant Costs $20,000-Standard $ 20,000 $ 1,000 $30,000-Standard $ 30,000 $ 1,000 $20,000-UEFT Added $ 20,000 $ 1,000 $30,000-UEFT Added $ 30,000 $ 1,000 $1,000,000-UEFT Added $1,000,000 $ 1,000 ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE

20 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company FAMILY PLAN ENDORSEMENT #5 In consideration of the premium charged, it is hereby understood and agreed that the policy is amended as follows: 1. Section II. DEFINITIONS, paragraph E, is deleted in its entirety and replaced with the following: E. Insured means each natural person on record with us as enrolled in a membership program at the time of a stolen identity event. Where an enrolled person has chosen a spouse plan, insured also means such person s spouse. Where an enrolled person has chosen a family plan, insured also means such person s family members. 2. Section II. DEFINITIONS, is amended by adding the following to the end thereof: FP (a) Family members means the enrollee s spouse, dependents and children under the age of twenty-six (26) who permanently live in the same residence as the enrollee at the time of the stolen identity event. FP (b) Family plan is a membership program option which allows the enrollee to elect coverage for family members. FP (c) Spouse means a person who is either: (a) legally married to the insured; or, if there is no such person, (b) a person who, although not legally married to the insured has cohabited with the insured for a period of at least one (1) year and is publicly represented as the insured s domestic partner in the community in which they reside. FP (d) Spouse plan is a membership program option which allows the enrollee to elect coverage for a spouse. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE

21 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company DISCOVERY COVERAGE TRIGGER ENDORSEMENT #6 In consideration of the premium charged, it is hereby understood and agreed that: 1. Section I. INSURING AGREEMENT is deleted in its entirety and replaced by the following: We shall pay the insured for loss, excess of any applicable deductible, resulting from stolen identity events first discovered by the insured during the policy period and reported to us within 90 days of such first discovery of the stolen identity event. 2. In Section II. DEFINITIONS, Paragraph O is deleted in its entirety and replaced with the following: Stolen identity event means the fraudulent use of the insured s personal identification, social security number, or other method of identifying the insured. This includes the fraudulent use of the personal identity of the insured to establish credit accounts, secure loans, enter into contracts or commit crimes. All loss resulting from stolen identity event(s) and arising from the same, continuous, related or repeated acts shall be treated as arising out of a single stolen identity event occurring at the time of the first such stolen identity event. Stolen identity event shall not include the fraudulent use of the insured s business name, d/b/a or any other method of identifying any business activity of the insured. 3. In Section IV. OBLIGATIONS OF THE INSURED, Paragraph A is deleted in its entirety and replaced with the following: A. If a stolen identity event occurs, the insured shall: Promptly, but no later than 90 days after first discovery by the insured of the stolen identity event, the insured or the master policyholder on the insured s behalf, notify us of the stolen identity event by calling the telephone number provided in the insured s Summary Description of Benefits, or contacting us at Chartis Claims, Inc., 175 Water Street, New York, NY The insured or the master policyholder on the insured s behalf, shall also follow our written instructions to mitigate potential loss, which will be provided to the insured or the master policyholder on the insured s behalf, in a claims kit and which will include the prompt notification of the major credit bureaus, the Federal Trade Commission s Identity Theft Hotline and appropriate law enforcement agencies. 1

22 4. In Section V. EXCLUSIONS, Paragraph E. Late Reporting is deleted in its entirety and replaced with the following: E. Late Reporting Any loss arising from a stolen identity event that is not reported to us within 90 days after it is first discovered by the insured. 5. In Section VI. LIMITS OF INSURANCE, Paragraphs A and B are deleted in their entirety and replaced with the following: A. The aggregate limit of insurance specified in Item 9 of the Declarations is the most we shall pay the insured for loss, excess of any applicable deductible, resulting from all stolen identity events combined first discovered by the insured during the policy period. B. All loss arising out of the same, continuous, related or repeated stolen identity events shall be subject to the terms, conditions, exclusions and single Aggregate Limit of Insurance in effect at the time the first such stolen identity event is first discovered by the insured. 6. Section VII. DEDUCTIBLE, Paragraph B is deleted in its entirety and replaced with the following: B. Regardless of the number of covered stolen identity events first discovered by the insured during the policy period, each insured shall be responsible for only a single Deductible during any one policy period. 7. Section VIII. POLICY CONDITIONS, Paragraph B (2) is deleted in its entirety and replaced with the following: 2. The action is brought within two (2) years after the date on which a stolen identity event is first discovered by the insured. 8. Section VIII. POLICY CONDITIONS, Paragraph F Transfers of Rights or Recovery Against Others to Us is deleted in its entirety and replaced with the following: F. Transfers of Rights of Recovery Against Others to Us If any person for whom we make payment under this policy has rights to recover from another, those rights are transferred to us to the extent of our payment. That person shall do everything necessary to secure our rights and shall do nothing after he first discovers a stolen identity event to impair them. The insured may, however, waive his rights of recovery in writing before he first discovers the stolen identity event. 2

23 9. Section IX. POLICY TERMINATION, Paragraph A is deleted in its entirety and replaced with the following: A. This policy shall terminate on the expiration date specified in Item 4 of the Declarations or, in the event of cancellation or non-renewal of this policy, then the date specified in such notice of cancellation or non-renewal. There shall be no coverage for any stolen identity event first discovered by the insured after the effective date and time of such expiration, cancellation or non-renewal. Termination of this policy shall not eliminate the insured s right to report to us, within 90 days of first discovery by the insured during the policy period, a stolen identity event otherwise covered by this policy. 10. Section X. CANCELLATION OF MEMBERSHIP is deleted in its entirety and replaced with the following: X. CANCELLATION OF MEMBERSHIP After the cancellation, termination or expiration of the insured s individual membership in the membership program, any coverage under this policy for that insured is terminated and there shall be no coverage for that insured for any stolen identity event first discovered by the insured after the effective date and time of such termination. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE 3

24 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company POLICY MODIFICATIONS CANCELLATION ENDORSEMENT #7 In consideration of the premium charged, it is hereby understood and agreed that Clause X. CANCELLATION OF MEMBERSHIP of this policy is amended by adding the following paragraph to the end thereof: Notwithstanding the foregoing, in the event that a financial strength rating is issued (1) below A- by A.M. Best Co., or (2) below BBB by Standard & Poor s Ratings Services, for us (hereinafter Credit Rating Downgrade ), this policy may be canceled by the master policyholder by mailing written prior notice to us or by surrender of this policy to us or our authorized agent. If this policy is canceled by the master policyholder within 30 days after such Credit Rating Downgrade, we shall retain the pro rata proportion of the total premium as of the effective date of the cancellation in excess of the minimum premium. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE Page 1 of 1

25 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company PERSONAL INTERNET AND IDENTITY COVERAGE AMENDATORY #8 In consideration of the premium charged it is agreed that: Section II., Definitions, Item O, is amended by appending the following: The Definition of Stolen identity event is amended as follows Stolen identity event shall include Medical identity theft. Solely for the purposes of the coverage provided by this endorsement: I. Medical Identity Theft means the theft of the insured s personal or health insurance information to obtain medical treatment, pharmaceutical services or medical insurance coverage. Medical identity theft also means the theft of the insured s personal or health insurance information to submit false claims for medical services or goods. Section II, Definitions, Item D, Costs is amended by appending the following: II. G. Reasonable and necessary costs incurred by the insured for ordering medical records for the purpose of amending and/or rectifying these documents as a result of a stolen identity event H. Reasonable and necessary costs incurred by the insured for the replacement of identification cards, drivers licenses, credit cards and passports as a result of a stolen identity event I. Reasonable and necessary costs incurred by the insured associated with the use of any certified public accountant engaged to amend or rectify records as to the true name or identity of the insured as a result of a stolen identity event. We reserve the right to select such certified public accountant; however, with our express prior written consent, you may select such certified public accountant;

26 II. Section II, Definitions, Item F, Legal Defense Fees and Expenses is amended by appending the following: E. Challenging the accuracy or completeness of any information in the insured s medical history as a result of a medical identity theft. It is further agreed that solely with respect to subparagraph (c) the insured, with our express prior written consent, may select such attorney. F. Representation by a Social Security Administration approved lawyer in response to a stolen identity event; Section VI, Limits of Insurance is amended by appending the following: III. G. The maximum we shall pay per insured for all certified public accountant costs shall not exceed the amount for certified public accountant costs as specified in the Declarations. This amount is a sublimit of the Aggregate Limit of Insurance for each insured and, as such, is part of and not in addition to, the Aggregate Limit of Insurance for each insured. ALL OTHER TERMS, CONDITIONS AND EXCLUSIONS REMAIN UNCHANGED. All rights reserved. AUTHORIZED REPRESENTATIVE

27 This endorsement, effective at 12:01 AM 01/01/2016 forms a part of Policy number: Issued to: Identity Theft Guard Solutions, LLC dba ID Experts By: AIG Specialty Insurance Company UNAUTHORIZED ELECTRONIC FUND TRANSFER REIMBURSEMENT ENDORSEMENT #9 This endorsement modifies insurance provided under the following: PERSONAL IDENTITY COVERAGE In consideration of the premium charged, it is hereby understood and agreed that the policy is amended as follows: (1) SECTION I, INSURING AGREEMENT, is amended to include the following at the end thereof: EFT 1. Unauthorized Electronic Fund Transfer Reimbursement Coverage We shall reimburse the insured for loss, excess of any applicable deductible, resulting from unauthorized electronic fund transfers which (i) first occurs during the policy period; and (ii) is reported to us within ninety (90) days of the discovery of such unauthorized electronic fund transfer. (2) SECTION II, DEFINITIONS, PARAGRAPH G, Loss, is amended by adding the following at the end thereof: With respect to Insuring Agreement EFT-1. (Unauthorized Electronic Fund Transfer Reimbursement Coverage): Stolen Funds Loss means the principal amount, exclusive of interest and fees, incurred by the insured and caused by an unauthorized electronic fund transfer. Stolen Funds Loss shall not include any amount for which the insured did not seek reimbursement from the financial institution which issued the access device and holds the account from which funds were stolen, and stolen funds loss shall not include any amount for which the insured received reimbursement from any source. (3) SECTION II, DEFINITIONS, is amended by appending the following definitions to the end of that Section: (6/12) Page 1 of 5

28 EFT1. Access Device means a card, code or other mean of access to an insured s account, or any combination thereof, that may be used by the insured to initiate electronic fund transfers. EFT2. Account means a cash, demand deposit (checking), savings or money market account of the insured held directly or indirectly by a financial institution and established primarily for personal, family or household purposes.. EFT3. Electronic Fund Transfer means any transfer of funds that is initiated through an electronic terminal, telephone, computer, or magnetic tape for the purpose of ordering, instructing or authorizing financial institution to debit or credit an insured s account. Electronic fund transfer includes but is not limited to (i) point-of-sale transfers; (ii) automated teller machine transfers; (iii) direct deposits or withdrawals of funds; (iv) transfers initiated by telephone; (v) transfers resulting from debit card transactions, whether or not initiated through an electronic terminal. EFT4. Financial Institution means a bank, savings, association, credit union, or any other person that directly or indirectly holds an account belonging to an insured, or that issues an access device and agrees with an insured to provide electronic fund transfer services. EFT5. Stolen Funds Loss means the principal amount, exclusive of interest and fees, incurred by the insured and caused by an unauthorized electronic fund transfer. Stolen Funds Loss shall not include any amount for which the insured did not seek reimbursement from the financial institution which issued the access device and holds the account from which funds were stolen, and stolen funds loss shall not include any amount for which the insured received reimbursement from any source. EFT6. Unauthorized electronic fund transfer means an electronic fund transfer from a insured s account initiated by a person other than the insured without the actual authority to initiate the transfer and from which the insured receives no benefit. An unauthorized electric fund transfer does not include an electronic fund transfer initiated: (1) by a person who was furnished the access device to the to the insured s account by the insured, unless the insured has notified the financial institution that transfers by such person are no longer authorized; (2) with fraudulent intent by the insured or any person acting in concert with the insured; or (3) by the financial institution or its employee. (4) SECTION IV, OBLIGATIONS OF THE INSURED, is amended by appending the following: EFT. With respect to Insuring Agreement EFT-1., if a stolen funds loss occurs, the insured shall: (6/12) Page 2 of 5

29 1. take all reasonable steps to prevent further stolen funds loss after suffering an unauthorized electronic fund transfer including, but not limited, to promptly contacting the financial institution which issued the access device and holds the account; 2. take all reasonable steps to obtain reimbursement for the stolen funds loss from the financial institution which issued the access device and holds the account; 3. promptly give notice to us of the stolen funds loss and detailed information regarding the stolen funds loss, including without limitation, the type, dates, and amount of stolen funds loss; provided, however, that notice to the master policyholder shall not satisfy this policy condition; 4. send us at our request, a signed, sworn proof of stolen funds loss, or affidavit containing the information we request to investigate the stolen funds loss. The insured shall do this within sixty (60) days after our request. We shall supply the insured with the necessary forms. 5. provide us with complete description of efforts to obtain reimbursement from the financial institution that issued the access device and holds the account and stated reasons why full or partial reimbursement was not provided; and 6. provide any other reasonable information or documentation that we may request. (5) SECTION V, EXCLUSIONS, Item E, Late Reporting is amended by the addition of the following: Solely with respect to an unauthorized electronic fund transfer, we do not cover any unauthorized electronic fund transfers reported to us more than ninety (90) days of the discovery of the unauthorized electronic fund transfers (6) SECTION V, EXCLUSIONS, is amended by appending the following: With respect to coverage under Insuring Agreement EFT-1, there shall be no coverage under this policy for any loss arising directly or indirectly from: EX1. EX2. EX3. Business or Professional Services We do not cover any loss arising out of a business or professional service engaged in by the insured, including loss connected to accounts used for business purposes. Public Authority Destruction, confiscation or seizure by order of any government or public authority; Voluntary Disclosure We do not cover any loss resulting from the voluntary disclosure of any code or other security information which can be used to gain access to the insured s account using an access device to someone who subsequently contributes to the unauthorized electronic fund transfer. This does not include disclosure of any code or other security information which can be used to gain access to the insured s using an (6/12) Page 3 of 5

30 access device that occurred when the insured were under duress or when the insured were a victim of fraud. EX4. Family Member Exclusion Any Unauthorized Electronic Funds Transfer which a member of the insured s family (including but not limited to spouse, sibling, parent, grandparent, child, grandchild, niece or nephew) participated in, directed or had prior knowledge. (7) SECTION VI, LIMITS OF INSURANCE, is amended by deleting Items A and B in their entirety and replacing them with the following: A. The aggregate limit of insurance specified in Item 9 of the Declarations is the most we shall pay the insured for loss, excess of any applicable deductible, resulting from all stolen identity events and unauthorized electronic fund transfers combined first occurring during the policy period. B. All loss arising out of the same, continuous, related or repeated stolen identity events or unauthorized electronic fund transfers shall be subject to the terms, conditions, exclusions and single Aggregate Limit of Insurance in effect at the time the first such stolen identity event or unauthorized electronic fund transfer occurs. (8) SECTION VII, DEDUCTIBLE, is amended by deleting Item B in its entirety and replacing it with the following: B. Regardless of the number of covered stolen identity events or the number of covered unauthorized electronic fund transfers first occurring during the policy period each insured shall be responsible for only a single Deductible during any one policy period. (9) SECTION VIII, POLICY CONDITIONS, PARAGRAPH A, Coverage Territory is deleted in its entirety and replaced with the following: A. Coverage Territory Subject to its terms, conditions and exclusions, this policy applies to a stolen identity event or unauthorized electronic fund transfer occurring anywhere in the world, but we shall only pay for loss incurred in the United States. (10) SECTION VIII, POLICY CONDITIONS, PARAGRAPH B, Legal Action Against Us, Item 2, is deleted in its entirety and replaced with the following: 2. The action is brought within two (2) years after the date on which a stolen identity event or unauthorized electronic fund transfer first occurred (6/12) Page 4 of 5