Activate ProtectMyID Now in Three Easy Steps. If you have questions or need an alternative to enrolling online, please call

Transcription

1 Mid Atlantic Professionals, Inc. DBA / SSI ( SSI ) had a data breach incident that occurred on or before March 7, As a result of this incident, some personal identifiable information was exposed to the public. Regrettably, this data breach incident involved some of our current and former employees as well as sub-contract personnel data. If you previously worked for Mid Atlantic Professionals, Inc. DBA / SSI and did not receive a data breach notification letter from our company, please contact us at or by info@groupss.com. Sincerely, SSI Team

2 Mid Atlantic Professionals, Inc. DBA / SSI Observation Dr., Suite 204 Germantown, MD April 22, 2014 RE: Important Security and Protection Notification Please read this entire letter. Dear Employee, We are contacting you to ensure that you are made aware of a serious data security incident that occurred at Mid Atlantic Professionals, Inc. DBA / SSI ( SSI ) on or before March 7, As a result of the security incident, the contents of a computer drive storing SSI information were inadvertently exposed on the internet. Despite securing the information upon discovery of the incident, an internet search engine saved, and made accessible, the contents of the computer drive, including SSI employee personal information. Regrettably, this security data breach incident involved your personal records. The compromised information includes a combination of: name, Social Security number, date of birth, mailing address, address, your SSI hourly wage, phone number, ethnicity and gender. We have requested that the search engine currently hosting this information immediately remove the information. Please be assured that we have taken, and are continuing to take, the necessary steps to address the incident, and that we are committed to fully protect all the information that you have entrusted to us. We are notifying you so you can take action along with our efforts to minimize or eliminate potential harm. Because this is a serious incident, we strongly encourage you to take preventive measures now to help prevent and detect any misuse of your information and remain vigilant for incidents of fraud and theft by reviewing account statements and monitoring free credit reports. What we are doing to protect your information: SSI takes this incident seriously and is committed to assuring the security of your data. To help protect your identity, we are offering a complimentary two-year membership of Experian s ProtectmyID Elite. This product helps detect possible misuse of your personal information and provides you with superior identity protection services focused on immediate identification and resolution of identity theft. Activate ProtectMyID Now in Three Easy Steps 1. ENSURE That You Enroll By: 7/31/2014 (Your code will not work after this date.) 2. VISIT the ProtectMyID Web Site to enroll: 3. PROVIDE Your Activation Code: «Code» If you have questions or need an alternative to enrolling online, please call ADDITIONAL DETAILS REGARDING YOUR {24-MONTH} PROTECTMYID MEMBERSHIP: A credit card is not required for enrollment. Once your ProtectMyID membership is activated, you will receive the following features:

3 ! Free copy of your Experian credit report! Surveillance Alerts for: o Daily 3 Bureau Credit Monitoring: Alerts of key changes & suspicious activity found on your Experian, Equifax, and TransUnion credit reports. o Internet Scan: Alerts if your personal information is located on sites where compromised data is found, traded or sold. o Change of Address: Alerts of any changes in your mailing address.! Identity Theft Resolution & ProtectMyID ExtendCARE: Toll-free access to US-based customer care and a dedicated Identify Theft Resolution agent who will walk you through the process of fraud resolution from start to finish for seamless service. They will investigate each incident; help with contacting credit grantors to dispute charges and close accounts including credit, debit and medical insurance cards; assist with freezing credit files; contact government agencies. o It is recognized that identity theft can happen months and even years after a data breach. To offer added protection, you will receive ExtendCARE TM, which provides you with the same high-level of Fraud Resolution support even after your ProtectMyID membership has expired.! $1 Million Identity Theft Insurance*: Immediately covers certain costs including, lost wages, private investigator fees, and unauthorized electronic fund transfers.! Lost Wallet Protection: If you misplace or have your wallet stolen, an agent will help you cancel your credit, debit, and medical insurance cards. Once your enrollment in ProtectMyID is complete, you should carefully review your credit report for inaccurate or suspicious items. If you have any questions about ProtectMyID, need help understanding something on your credit report or suspect that an item on your credit report may be fraudulent, please contact Experian s customer care team at What you can do to protect your information: There are additional actions you can consider taking to reduce the chances of identity theft or fraud on your account(s). Please refer to the final page of this letter. ADDITIONAL ACTIONS TO HELP REDUCE YOUR CHANCES OF IDENTITY THEFT " PLACE A 90-DAY FRAUD ALERT ON YOUR CREDIT FILE An initial 90 day security alert indicates to anyone requesting your credit file that you suspect you are a victim of fraud. When you or someone else attempts to open a credit account in your name, increase the credit limit on an existing account, or obtain a new card on an existing account, the lender should takes steps to verify that you have authorized the request. If the creditor cannot verify this, the request should not be satisfied. You may contact one of the credit reporting companies below for assistance. Equifax Experian TransUnion " PLACE A SECURITY FREEZE ON YOUR CREDIT FILE If you are very concerned about becoming a victim of fraud or identity theft, a security freeze might be right for you. Placing a freeze on your credit report will prevent lenders and others from accessing your credit report entirely, which will prevent them from extending credit. With a Security Freeze in place, you will be required to take special steps when you wish to apply for any type of credit. This process is also completed through each of the credit reporting companies. " ORDER YOUR FREE ANNUAL CREDIT REPORTS Visit or call Once you receive your credit reports, review them for discrepancies. Identify any accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is correct. If you have questions or notice incorrect information, contact the credit reporting company. * Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of AIG. The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

4 " MANAGE YOUR PERSONAL INFORMATION Take steps such as: carrying only essential documents with you; being aware of whom you are sharing your personal information with and shredding receipts, statements, and other sensitive information. " USE TOOLS FROM CREDIT PROVIDERS Carefully review your credit reports and bank, credit card and other account statements. Be proactive and create alerts on credit cards and bank accounts to notify you of activity. If you discover unauthorized or suspicious activity on your credit report or by any other means, file an identity theft report with your local police and contact a credit reporting company. " OBTAIN MORE INFORMATION ABOUT IDENTITY THEFT AND WAYS TO PROTECT YOURSELF Visit for general information regarding protecting your identity. The Federal Trade Commission has an identity theft hotline: ; TTY: They also provide information on-line at What you can do to protect your information: You can obtain information from the FTC and Credit Agencies about fraud alerts, security freezes, and information about steps to avoid identity theft: Federal Trade Commission (FTC) Please use the following link: to contact Federal Trade Commission (FTC) with any questions you might have regarding data breach and Identity theft. Headquarters Federal Trade Commission 600 Pennsylvania Avenue, NW Washington, DC Telephone: (202) Bureau of Consumer Protection Federal Trade Commission 601 New Jersey Avenue, NW Washington, DC For Individual Consumers: Complaints about fraud, scams, phishing, identity theft, unwanted telemarketing, credit or debt issues, or other unfair business practices may be submitted to For residents of Georgia, Missouri, New Jersey, Ohio, Pennsylvania, Texas, Vermont, and Washington D.C., we have also advised the three major United States credit reporting agencies about this incident, and have given those agencies a general report, alerting them to the fact that the incident occurred. However, we have not notified them about the presence of your particular information in the data breach. For residents of Maryland, you may obtain information about avoiding identity theft from the FTC or the Maryland Attorney General s Office. You can contact the Maryland Attorney General at: Office of the Attorney General, Consumer Protection Divisions, 200 St. Paul Place, Baltimore, MD (888) For residents of Massachusetts, you have the right to obtain a police report in regard to this incident. If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it. Massachusetts law also requires that you be informed of the following procedure in order to obtain a security freeze on your credit report: If you have been the victim of identity theft, and you provide the credit reporting agency with a valid police report, you cannot be charged to place, lift or remove a security freeze. In other cases, a credit reporting agency may charge you up to $5.00 each to place, temporarily lift, or permanently remove a security freeze. To place a security freeze on your credit report, you must send a written request to each of the three major credit reporting agencies, listed below, and you must provide the following information: Full name;

5 Social Security Number; date of birth; if you have moved in the past five years, the addresses where you have lived for the prior five years; proof of current address, such as a utility bill; a legible photocopy of a government issued identification card, such as a driver s license; if you have been the victim of identity theft, a copy of either the police report or complaint to law enforcement regarding identity theft; if you are not a victim of identity theft, payment by check, money order, or credit card. Do not send cash. To lift the security freeze in order to allow a specific entity or individual access to your credit report, you must call or send a written request to the credit reporting agencies by mail and include proper identification (name, address and Social Security number), as well as the PIN number or password provided to you when you placed the security freeze, as well as the identities of those entities or individuals you would like to receive your credit report, or the specific period of time you would like the credit report to be available. The credit reporting agencies have three business days after receiving your request to lift the security freeze for those identified entities or for the specified period of time. Likewise, to remove the security freeze, you must send a written request to each of the three credit reporting agencies by mail and include proper identification (name, address and Social Security number) and the PIN number or password provided to you when you placed the security freeze. After receiving your request, the credit reporting agencies have three business days to remove the security freeze. For residents of North Carolina, you may obtain information about avoiding identity theft from the FTC or the North Carolina Attorney General s Office. You can contact the North Carolina Attorney General at: Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC (877) We sincerely apologize for this incident, regret any inconvenience it may cause you and encourage you to take advantage of the product outlined herein. Should you have questions or concerns regarding this matter and/or the protections available to you, please do not hesitate to contact us at Sincerely, Linda Dennis President / CEO Mid Atlantic Professionals, Inc. DBA / SSI A woman owned, small disadvantaged 8(a) company Ph: (301) Fax: info@groupssi.com USW * Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of AIG. The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.