Home › Abuse › Information Protection Evaluation Team (IPET) Procedures

DRAFT: Breach Notification

Fri, 03/06/2009 - 00:27 — binde

CONFIDENTIAL DRAFT

Dear ------- :
We have discovered a security breach to a database maintained by the university that contains personal information.
We have no indication that any of your information has been misused. Nevertheless, we wanted to inform you about steps that you can take to protect your personal information. We also wanted to make you fully aware of the steps the university is taking.
We deeply regret that this situation occurred. Protecting personal information is a priority at Rutgers, and we want to do all that we can to maintain your trust and confidence.

(OPTIONAL: DETAILS OF THE INCIDENT)

As soon as the university became aware of this incident, the following steps were taken:

     
  1. • The matter was referred to a standing university committee that evaluates such incidents.
     
    • • All affected individuals are being notified with this letter.
       
      • • As required by the state’s Identity Theft Prevention Act, the university has notified the New Jersey State Police.
         
        • • Law enforcement at the university has been notified.
          We apologize for any inconvenience or concerns this may cause. If you have any questions or need additional information, please contact (NAME/OFFICE) at (NUMBER) or (EMAIL).

          Steps You Can Take to Protect Yourself

          Although there is no indication that your personal information has been misused, we recommend that in the coming months you carefully check all credit card and other financial account information that you receive.
          If you detect any unauthorized or suspicious activity in any of these accounts, we recommend that you contact your credit card company or other account issuer immediately.
          In addition, we recommend that you place a fraud alert on your credit file. A fraud alert tells creditors to contact you before they open any new accounts or change your existing accounts. Call any one of the three major credit bureaus. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts. All three credit reports will be sent to you, free of charge, for your review.
           
          Equifax – 800-525-6285
          Experian – 888-397-3742
          TransUnionCorp -- 800-680-7289
          Disreputable persons or organizations may try to contact you, falsely identify themselves as representatives of Rutgers and offer help. We recommend that you do not release personal information in response to any contacts that you have not initiated.
          We also recommend that you consult with the following federal, state and university Web sites for additional information about protecting your personal information.
          The Federal Trade Commission Web site is www.consumer.gov/idtheft. www.state.nj.us/lps/ca/idtheft.htm.
          (NAME)
          (TITLE)

          The New Jersey Identity Theft Web site is
          The university Web site is polcomp.rutgers.edu/identity.shtml.
          In addition, we recommend that you consider placing a security freeze on your credit report. You can find the necessary information on the New Jersey Identity Theft Web site.
          Sincerely,

         

       

     

    2.