Notice of a Data Security Incident
Carter Credit Union (“Carter”) recently learned that an unauthorized third party gained temporary access to Carter’s network. Upon learning of the situation, Carter immediately took steps to contain and remediate the incident and launched an internal investigation. Carter also reported the incident to law enforcement and engaged a leading forensic security firm to assist in its investigation and confirm the security of its computer systems and network. The forensic investigation recently concluded and determined that the unauthorized third party accessed certain files on the credit union’s network.
The credit union reviewed the relevant files and recently determined that they contained certain individuals’ personal information. The type of information varies by individual but may include one or more of the following: name, date of birth, Social Security number, driver’s license/state identification number, passport number, credit/debit card number, financial account number, financial account history, retirement/401(k) benefits information, limited medical treatment/diagnosis information, and health insurance information.
Carter has begun mailing letters to involved individuals for whom valid mailing addresses are available, including an offer of complimentary identity theft protection services for those whose Social Security numbers, driver's license numbers, and/or passport numbers were involved. The service helps detect possible misuse of personal information and provides identity protection services focused on immediate identification and resolution of identity theft. Carter encourages individuals to take advantage of the credit monitoring service, which is completely free and will not impact credit scores.
Carter has no evidence that personal information has been misused as a result of this incident. However, as a precautionary measure, Carter recommends individuals remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing account statements and monitoring credit reports. If individuals detect suspicious activity, they should notify the entity with which the account is maintained and promptly report any fraudulent activity to proper law enforcement authorities, including police and state attorney general. Additional information regarding identity protection can be obtained at www.ftc.gov/idtheft or by calling the Federal Trade Commission at 1-877-ID-THEFT (1-877-438-4338). Individuals may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
Contact information for the three national credit reporting agencies is as follows:
Carter values the trust that our members place in the credit union to protect member’s privacy, and the credit union takes its responsibility to safeguard personal information seriously. The credit union is taking steps to reduce the risk of this type of incident from occurring in the future, including enhancing our technical security measures. The credit union apologies to its members for any inconvenience this incident might cause.
Individuals seeking additional information regarding the incident may call a confidential, toll-free inquiry line at 877-332-1699 from 9 am – 9 pm Eastern Time, Monday through Friday, excluding major U.S. holidays.