Data breach letter v4 1 8 25 15

Page 1

August 25, 2015

Engagement Number: PC96170 Activation Code:

Dear <name>: Recently, Michigan Catholic Conference (MCC) Information Technology staff became aware of a suspicious file buried deep within the MCC website. To assess any potential damage, an Internet security and consulting firm with which MCC cooperates was contacted. Regrettably, after scrutinizing Internet activity over the past several months, the consulting firm has informed MCC that a cyber-attack likely hacked its way into password protected, sensitive personal data necessary for your employer and MCC to process payroll and other human resource information. While MCC’s firewalls are up to date, there is a likelihood that this sophisticated attack was able to discreetly access employee names, social security numbers, dates of birth, addresses and monthly wages. After reviewing the report from the Internet consulting firm, MCC immediately took out of operation and upgraded the password protected page that exchanges information with your employer. Social Security numbers were replaced with another identifier in the system and all dates of birth and addresses were removed. MCC staff is in the process of assigning new user names and passwords for employers to access wage entry and human resource data. Following a review of the protocols that are in place, and the security measures continually utilized by Information Technology staff, I am ensuring that appropriate steps are being taken to secure and protect to the fullest extent possible the systems used to facilitate human resource information. This data breach is of utmost concern to me. As such, MCC has contracted with Experian to provide identity theft protection at no cost to you for one year. Experian’s ProtectMyID Alert service helps detect possible misuse of your personal information and provides you with superior identity protection support focused on immediate identification and resolution of identity theft. To begin your credit monitoring service, contact Experian at 877-371-7902 and use the engagement number above; or activate online at www.protectmyid.com/redeem using the code also at the top of this letter. Please note you must enroll by November 30, 2015 to receive this service. Additionally, MCC has created a dedicated line with Epiq Systems at 877341-4607 for impacted employees. Epiq Systems is an international data security firm and can help answer any questions you may have about data breaches or identity theft. Should you have any questions for MCC please do not hesitate to contact the Employee Benefits department at 800-395-5565. With my sincere apologies for this most unwelcome cyberattack, and my firmest commitment that MCC is taking all available steps to secure employees’ personal data, I am Sincerely,

Paul A. Long President and CEO


Turn static files into dynamic content formats.

Create a flipbook
Issuu converts static files into: digital portfolios, online yearbooks, online catalogs, digital photo albums and more. Sign up and create your flipbook.