WARNING: SECURITY BREACH
Dear member of the UAF community,
Important contact information is included below. Please DO NOT reply to this e-mail.
The University of Alaska recently discovered that computer intruders had breached a server on the Kuskokwim Campus in Bethel. Multiple intrusions occurred between February 2005 and January 2006. These went undetected for a number of reasons, including the absence of unusual activity or reports of other problems related to data theft. When a routine trouble report indicated the possibility of an intrusion, a full investigation was initiated and the server secured. As a result, we documented the intrusions and the fact that a file on the server contained your name and Social Security number, along with those of other employees and students. While there is no indication that the intruders accessed your personal information, or will use it for identity theft, we are sending this notification to you. Please accept our sincere apologies. This is a serious issue for us, and we know it is a serious concern for you. Please be assured that we continue to aggressively investigate and have taken immediate steps to improve security and data management practices.
The University has received no reports of identity theft related to this issue. However, one option you have to protect yourself against the possible misuse of your personal information is to contact one of the three major credit reporting agencies, each of which has an automated phone-in fraud alert process. If you place a fraud alert, the agency you contact will notify the other two agencies. Fraud alerts will then be placed automatically on your accounts at those two agencies as well, and you will be able to request your credit reports at no cost. The effects of a fraud alert are explained at: http://www.idtheftcenter.org/fraudalerts.shtml. Contact information for the credit agencies is:
o Equifax (800) 525-6285 www.equifax.com
o Experian (888) 397-3742 www.experian.com
o TransUnion (800) 680-7289 www.transunion.com
Once you receive your credit reports, review them for any suspicious activity. If you see any accounts you did not open, incorrect personal information, or anything you do not understand, call the credit bureau. If you find evidence of identity theft, call the UAF Police Department at 1-907-474-6200. The department can provide a copy of the police report so that you can provide it to creditors. Even if you do not find any signs of fraud on your reports at this time, consumer protection organizations recommend that you check your credit report every three months for the next year.
For more information regarding this incident or identity theft in general you may visit our web site at www.uaf.edu/security or web sites such as California's Office of Privacy Protection: http://www.privacy.ca.gov/cover/consumerinfo.htm. If you do not have access to the Internet and you have any questions, you may contact the University at 1-888-331-8003.
Other than this letter, the University will not initiate any contact with you about this incident, and will NOT ask you to confirm any information, such as your address or Social Security number. If you receive such a request, it is NOT from the University.
Sincerely,
Steve Smith, Chief Information Technology Officer
Fuck.
Important contact information is included below. Please DO NOT reply to this e-mail.
The University of Alaska recently discovered that computer intruders had breached a server on the Kuskokwim Campus in Bethel. Multiple intrusions occurred between February 2005 and January 2006. These went undetected for a number of reasons, including the absence of unusual activity or reports of other problems related to data theft. When a routine trouble report indicated the possibility of an intrusion, a full investigation was initiated and the server secured. As a result, we documented the intrusions and the fact that a file on the server contained your name and Social Security number, along with those of other employees and students. While there is no indication that the intruders accessed your personal information, or will use it for identity theft, we are sending this notification to you. Please accept our sincere apologies. This is a serious issue for us, and we know it is a serious concern for you. Please be assured that we continue to aggressively investigate and have taken immediate steps to improve security and data management practices.
The University has received no reports of identity theft related to this issue. However, one option you have to protect yourself against the possible misuse of your personal information is to contact one of the three major credit reporting agencies, each of which has an automated phone-in fraud alert process. If you place a fraud alert, the agency you contact will notify the other two agencies. Fraud alerts will then be placed automatically on your accounts at those two agencies as well, and you will be able to request your credit reports at no cost. The effects of a fraud alert are explained at: http://www.idtheftcenter.org/fraudalerts.shtml. Contact information for the credit agencies is:
o Equifax (800) 525-6285 www.equifax.com
o Experian (888) 397-3742 www.experian.com
o TransUnion (800) 680-7289 www.transunion.com
Once you receive your credit reports, review them for any suspicious activity. If you see any accounts you did not open, incorrect personal information, or anything you do not understand, call the credit bureau. If you find evidence of identity theft, call the UAF Police Department at 1-907-474-6200. The department can provide a copy of the police report so that you can provide it to creditors. Even if you do not find any signs of fraud on your reports at this time, consumer protection organizations recommend that you check your credit report every three months for the next year.
For more information regarding this incident or identity theft in general you may visit our web site at www.uaf.edu/security or web sites such as California's Office of Privacy Protection: http://www.privacy.ca.gov/cover/consumerinfo.htm. If you do not have access to the Internet and you have any questions, you may contact the University at 1-888-331-8003.
Other than this letter, the University will not initiate any contact with you about this incident, and will NOT ask you to confirm any information, such as your address or Social Security number. If you receive such a request, it is NOT from the University.
Sincerely,
Steve Smith, Chief Information Technology Officer
Fuck.