Monday, February 18, 2008
Update on Security Breach
MTEA staff has been working with A.C. Whitaker & Associations, the local agency which has administered our plan for many years. We have learned the following about the breach:
- A computer was stolen from the offices of Administrative Services, Inc. in Seattle. (ASI has handled the billing for our plan since February 1, 2004.)
- The data stolen includes: name, Social Security number, birthdate, home address, and billing data, but no medical information.
- The database included members covered by the group plan at any time since February 1, 2004, including those who have left MPS or the plan, and retirees.
- Two passwords were needed to access the billing data, creating suspicion of an inside job. The Seattle police requested delaying disclosure pending its investigation.
Free Credit Monitoring
ASI is offering 12 months of free credit monitoring services for individuals affected. The service will be provided by Affinion Group, a national leader in identity theft services.
Later this month, letters will be sent to the homes of all affected members with details.
You can access the information now by calling 1-866-614-9454 or at incident/asibpi.com.
Published February 4, 2008
Security Breach Alert for MTEA Group Disability Insurance Participants
If you have the MTEA's group disability insurance, please be advised that electronic records containing your name and Social Security number have been illegally accessed.
NO personal medical information was obtained.
What You Should Do Immediately
We recommend that you call 1 of the 3 national credit bureaus to begin a fraud alert. Each bureau is required to notify the other 2 - so that all 3 will place an alert. The toll-free fraud report numbers are:
- Equifax - 1-800-685-1111
- Trans Union - 1-800-916-8800 or 1-800-888-4213
- Experian - 1-888-397-3742
Review Your Credit Reports Carefully
Once you've initiated a fraud alert, you can request free copies of your credit reports. You should review them and look for:
- Credit inquiries from any company you don't recognize or haven't contacted
- New accounts you didn't authorize
- Debts on your account that you don't understand
You should also check the accuracy of personal information such as your Social Security number, address, name, initials, employers, etc.
If you find any fraudulent or incorrect information, contact the credit reporting agencies to have it removed.
What We've Learned Initially
A Seattle-based firm, Administrative Systems, Inc., suffered the security breach on December 31, 2007. This third party administrator (TPA) has clients across the country - including the Union Security Insurance Company, which underwrites our group disability plan.
By February 1, Administrative Services, Inc. will mail a letter to each individual affected by the breach. It will provide detailed information, including a toll-free number to call for questions and support.
Important: Monitor Your Credit Reports
According to the Credit Learning Center, you should regularly monitor your credit reports, especially for the 1st year after you discover identify theft. You need to make sure that no new evidence of fraudulent activity appears on your credit reports.
The Center recommends the following steps:
"In addition to placing a fraud alert on your credit files, it is also recommended that you close accounts that are compromised, such as credit card and bank accounts, immediately. When new accounts are opened to replace them, make sure they are protected with new passwords making sure these passwords include a combination of letters/numbers/symbols. You should avoid using your mother's maiden name, your birthday, the last digits of your social security number, your phone number, or any series of consecutive numbers.
"If your driver's license or other government-issued identification is lost or stolen, contact the DMV in your state and follow the appropriate steps to cancel the original license and have a replacement issued to you. You may request that the agency flag your file so that no other party can obtain a license or other official identification in your name."
"In addition to placing a fraud alert on your credit files, it is also recommended that you close accounts that are compromised, such as credit card and bank accounts, immediately. When new accounts are opened to replace them, make sure they are protected with new passwords making sure these passwords include a combination of letters/numbers/symbols. You should avoid using your mother's maiden name, your birthday, the last digits of your social security number, your phone number, or any series of consecutive numbers.
Some savvy thieves are now waiting a long time, as long as 5 years, before using stolen information. We urge ongoing monitoring, every 4months, alternating among the 3 credit bureaus.
Source Acknowledged
The National Education Association (NEA) has partnered with the Credit Learning Center to provide members with information and assistance if their private information is stolen or lost.
Go to creditlearningcenter.com for extensive information on identify theft - including prevention.