To Enroll, Please Call: MISSOURI 39.513686 SOUTHERN Or Visn: 00 ID Experts creation/protect PO BOX 4219 Enrollment Code: Everett WA 98204 ENDORSE NAME .- ADDRESS1 ADDRESSZ 22:. 082 COUNTRY BREAK <> Re: Notice of Data Breach Dear <>z We are writing to share important information about a recent incident involving Missouri Southern State University that may have affected your personal information. What Happened On January 9, 2019 the University was alerted to a possible cybersecurity attack triggered by a phishing email. The email contained a link, which, when clicked, allowed the perpetrator to potentially copy that employee?s Of?ce 365 account. Unfortunately, several employees fell victim to the fraudulent scheme. As soon as it detected this attack, the University contacted law enforcement and was directed to delay noti?cation of potentially affected individuals until its investigation was complete. The University immediately engaged a leading forensic investigation ?rm to look into the matter and undertook enhancements to its already robust IT systems to block potential email exploitation, including a mass password reset of all employee Of?ce 365 accounts. What Information Was Involved The University analyzed the entire contents of the impacted Office 365 accounts. The emails and attachments in the accounts contained, among other things, ?rst and last names, dates of birth, home addresses, email addresses, telephone numbers, and social security numbers. In late March, April, and early May, the University identi?ed emails containing personal information that may have been compromised by the attack. In mid-May, the University con?rmed that your ?rst and last name and social security number were contained in the impacted accounts. Please be assured that the investigation has not uncovered any evidence of actual misuse of your personal information. What We Are Doing Once the University discovered this attack, it took immediate steps to analyze and improve security and monitoring of its Of?ce 365 accounts containing sensitive information. As part of the investigation and remediation efforts, the University also engaged a forensics team, other cybersecurity experts, law enforcement of?cers, and the attorney general?s of?ce. Although it appears that the risk of harm to you is minimal as a result of this incident; the University started working straightaway to notify impacted individuals once the investigation was complete and the results were communicated with law enforcement and other regulators. Accordingly, to you and others who may have been inconvenienced by this unfortunate event, the University is offering, among other things, 24 months of complimentary credit monitoring and $1 million in identity theft insurance. You may sign up for this service by following the instructions included in Attachment A. MSSU No??ca?omGaneraL?Jndd 1 81612019 11:08:14 AM What You Can Do Regardless of whether you elect to receive credit monitoring and identity protection services, the University recommends that you remain vigilant in regularly reviewing and monitoring all account statements and credit histories to guard against any unauthorized transactions. If any suspicious or unusual activity is discovered, please contact your ?nancial institution or call the number on the back of your payment card. Attachment contains more details about steps you can take to protect against identity theft and fraud, including how to request a credit freeze or how to ?le a police report. For More Information First and foremost, we want to reinforce that keeping the personal information of our MSSU employees, candidates, students, and alumni safe and secure is of the utmost importance to us. We can assure you that as soon as we determined that some personal information may have been involved, we took swift action to address the issue and protect everyone who may have been affected. Anyone with questions regarding this incident is encouraged to contact the call center at (800) 395-3686, which is described in more detail in Attachment A. We sincerely regret that this incident occurred, and we apologize for any inconvenience that it may have caused. Very truly yours, Missouri Southern State University MSSU 2 6/6/2019 11:08:15 AM ATTACHMENT A The following services are available for 24 months from the date of enrollment: MleCareTM Identity Protection Services: This service offers single bureau continuous credit monitoring through Experian, cyber scan dark web monitoring, fully managed recovery, $1 million identity the? insurance and unlimited access to the ID Experts member service team. Additionally, ID Experts will provide complete restoration services to ensure that if you fall victim to identity theft or have any irregularities in your accounts an ICFE Certified Recovery Advocate will work on your behalf to remove all ?'aud from your records. Moreover, ID Experts will remediate all forms of identity theft, including medical identity theft. To enroll in this service, you will need to contact ID Experts, our identity protection service provider. You may sign up online at or by phone by calling (800) 395-3686 using the enrollment code above, which may be activated through September 10, 2019. ID Experts representatives are available Monday through Friday from 7 am - 7 pm Central Time. ATTACHMENT Provided below are names and contact information for the three major United States credit reporting agencies and additional information about steps you can take to: obtain a free credit report; to place a fraud alert, credit ?'eeze, or credit lock on your credit report; and to protect your information. If you believe you are a victim of ?'aud or identity theft you should consider contacting your local law enforcement agency, your state?s attorney general, or the Federal Trade Commission. INFORMATION ON OBTAINING A FREE CREDIT REPORT Residents of the United States are entitled to one ?ee credit report annually from each of the three major credit reporting agencies. To order your free credit reports, visit or call toll-free (877) 322-8228. INFORMATION ON FRAUD ALERTS, CREDIT FREEZES AND CREDIT LOCKS To place a fraud alert, credit freeze, or credit lock on your credit report, you must contact the one of the three credit reporting agencies below: Equifax: Experian: TransUnion: Consumer Fraud Division Credit Fraud Center TransUnion LLC PO. Box 740256 PO. Box 9554 PO. Box 2000 Atlanta, GA 30374 Allen, TX 75013 Chester, PA 19022-2000 1-888-766-0008 1-888-397-3742 1-800-680-7289 Fraud Alert: To place a ?'aud alert, contact any of the three major credit reporting agencies listed above and request that a fraud alert be put on your file. The agency that you contacted must notify the other two agencies. A fraud alert is free and lasts 90 days, but can be renewed. A fraud alert indicates to anyone requesting your credit ?le that you suspect you are a possible victim of fraud. A fraud alert does not impact your ability to get a loan or credit. Instead, it alerts a business that your personal information might have been compromised and requires that business to verify your identity before issuing you credit. Although this may cause some short delay if you are the one applying for the credit, it might protect against someone else obtaining credit in your name. Credit Freeze: Unlike a fraud alert, you must place a credit freeze on your credit ?le with each credit reporting agency. A credit freeze prohibits the agency ??om releasing information from a credit report until it is li?ed. When a credit freeze is in place, no one can open a new account. As a result, a credit freeze may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit, mortgages, employment, housing, or other services. MSSU 3 W2019 ":08215 AM A credit freeze generally lasts until you lift or remove it, although in some jurisdictions it will expire after seven years. The cost to place a credit freeze is typically between $5.00 and $10.00 each time you place a freeze, but may vary by jurisdiction. (In Massachusetts, for example, you may be charged no more than Certain jurisdictions may also permit a credit reporting agency to charge you similar fees to lift or remove the freeze. If you have been a victim of identity the?, and you provide the credit reporting agency with a valid police report, it cannot charge you to place, lift, or remove a credit ?'eeze. To place a credit freeze, contact the three credit reporting agencies listed above and provide the personal information required by each agency. Typically, this information will include: full name, with middle initial; social security number; date of birth; current address and previous addresses for the past ?ve years; and applicable fee or incident report or complaint with a law enforcement agency. The request should also include a copy of a govemment-issued identi?cation card, such as a driver?s license, state, or military identi?cation card, and a copy of a utility bill, bank, or insurance statement. Each copy should be legible, display your name and current mailing address, and the date of issue. The credit reporting agencies have three business days after receiving your request to place a credit ?'eeze on your credit report. The credit bureaus must also send written con?rmation to you within ?ve business days. To temporarily lift a credit freeze to allow a speci?c entity or individual access to your credit report, you must call or send a written request to the credit reporting agencies by mail and include proper identi?cation name, address, and social security number) and the personal identi?cation number or password provided to you when you placed the credit freeze as well as the identities of those entities or individuals you would like to receive your credit report or the speci?c period of time you want the credit report available. The credit reporting agencies have three business days after receiving your request to temporarily li? the credit freeze for those identi?ed entities or for the speci?ed period of time. To remove a credit freeze, you must send a written request to each of the three credit bureaus by mail and include proper identi?cation name, address, and social security number) and the personal identi?cation number or password provided to you when you placed the credit freeze. The credit bureaus have three business days a?er receiving your request to remove the freeze. Credit Lock: Like a credit freeze, a credit lock restricts access to your credit report and prevents anyone from opening an account until unlocked. Unlike credit freezes, your credit can typically be unlocked online without delay. To lock your credit, contact all three credit reporting agencies listed above and complete a credit lock agreement. The cost of a credit lock varies by agency, which typically charges fees. ADDITIONAL STEPS YOU CAN TAKE TO PROTECT YOUR INFORMATION Review Your Account Statements: Carefully review your bank, credit card, and other account statements every month to ensure that all of your account activity is valid. Report any questionable charges and in writing to the card or account issuer. Check Your Credit Report: Check your credit report periodically to ensure that all your information is correct. You can obtain a free credit report once per year by visiting or by calling (877) 322-8228. Carefully reviewing your credit report can help you spot problems and address them quickly. If you have any questions about your credit report or notice any inaccuracies, contact the relevant consumer reporting agency at the telephone number listed on the report. Obtain or File a Police Report: Certain jurisdictions Massachusetts) give you the right to obtain any police report ?led with respect to this incident. You also have the right to ?le a police report and obtain a copy of it if you are the victim of identity theft. Contact the Of?ce of the State Attorney General: You may contact the Of?ce of the State Attorney General at the contact information found in Attachment C. Consult the Federal Trade Commission: You may also contact the United States Federal Trade Commission for further information on fraud alerts, credit freezes, credit locks, and how to protect yourself from identity theft. The FTC can be contacted at 400 7th St. SW, Washington, DC 20024; telephone 1-877-382-4357; or MSSU No??ca?orLGeneraLieJndd 4 6/6/2019 11:08:15 AM ATTACHMENT State Attorneys General Contact List Alabama Florida Louisiana 501 Washington Avenue The Capitol, PL 01 PO. Box 94095 PO. Box 300152 Tallahassee, FL 32399-1050 Baton Rouge, LA 70804-4095 Montgomery, AL 36130-0152 (850) 414-3300 (225) 326-6000 (334) 242-7300 Georgia Maine Alaska 40 Capitol Square, SW State House Station 6 1031 W. 4th Avenue, Suite 200 Atlanta GA 30334-1300 Augusta, ME 04333 Anchorage, AK 99501-1994 (404) 656-3300 (207) 626-8800 (907) 269-5602 Hawaii Maryland Arizona 425 Queen Street 200 St. Paul Place 1275 W. Washington Street Honolulu, HI 96813 Baltimore, MD 21202-2202 Phoenix, AZ 85007 (808) 586-1500 (410) 576-6300 (602) 542-4266 3311 Idaho Arkansas 700 W. Jefferson Street, Suite 210 Massachusetts 323 Center St., Suite 200 P0. Box 83720 1 Ashburton Place Little Rock, AR 72201-2610 Boise, ID 83720-1000 Boston, MA 02108-1698 (800) 482-8982 (208) 334-2400 (617) 727-2200 attomey-general-maura-healey California Illinois 1300 I St., Suite 1740 100 W. Randolph Street Michigan Sacramento, CA 95814 Chicago, IL 60601 PO. Box 30212 (916) 445-9555 (312) 814-3000 525 W. Ottawa Street Lansing, MI 48909-0212 (517)373-1110 Colorado Indiana ichi an. v/a 1300 Broadway, 10th Floor 302 West Washington Street, 5'h Floor Denver, CO 80203 Indianapolis, IN 46204 Minnesota (720) 508-6000 (317) 232-6201 75 Dr. Martin Luther KingBoulevard, Suite 102 o_v/ Saint Paul, MN 55155 Iowa (651) 296-3353 or 1-800-657-3787 Connecticut 1305 E. Walnut TTY: (651) 297-7206 or 1-800-366- 55 Elm Street Des Moincs, IA 50319 4812 Hartford, CT 06106 (515) 281-5164 (860) 808-5318 Mississippi Kansas Department of Justice Delaware 120 SW. 10th Avenue, 2"d Floor PO. Box 220 820 N. French Street Topeka, KS 66612-1597 Jackson, MS 39205 Wilmington, DE 19801 (785)296-2215 (601) 359-3680 (302) 577-8400 Kentucky Missouri District of Columbia 700 Capitol Avenue, Suite 118 207 W. High Street 441 4th Street, NW, Suite 11008 Frankfort, KY 40601 Jefferson City, MO 65101 Washington, DC 20001 (502) 696-5300 (573) 751-3321 (202) 727-3400 http://agomogov/ MSSU 5 992019 11:08:15 AM Montana 215 N. Sanders Helena, MT 59620-1401 (406) 444-2026 v/ Nebraska State Capitol PO. Box 98920 Lincoln, NE 68509-8920 (402) 471-2682 hm?maggmegov/ Nevada 100 N. Carson Street Carson City, NV 89701 (775) 684-1 100 New Hampshire 33 Capitol Street Concord, NH 03301 (603) 271-3658 New Jersey 25 Market Street PO. Box 080 Trenton, NJ 08625 (609) 292-8740 8/pr20 13.01% New Mexico PO. Drawer 1508 Santa Fe, NM 87504-1508 (505) 490-4060 New York The Capitol, Floor Albany, NY 12224 (518) 474-7330 North Carolina PO. Box 629 Raleigh, NC 27602-0629 (919) 716-6400 ham/mecdgiggv/ North Dakota 600 E. Boulevard Avenue Bismarck, ND 58505-0040 (701) 328-2210 MSSU 8 Ohio 30 E. Broad Street Columbus, OH 43266-0410 (614) 466-4320 Oklahoma 313 NE let Street Oklahoma City, OK 73105 (405) 521-3921 Oregon 1162 Court Street, NE Salem, OR 97301 (503) 378-6002 Strawberry Square, 16?h Floor Harrisburg, PA 17120 (717) 787-3391 Puerto Rico Ave. 1056 De Diego, Pda. 22 Minillas Government Center Torre Norte Building, 7th Floor San Juan, PR 00940 (787) 722-7555 Rhode Island 150 S. Main Street Providence, R1 02903 (401) 274-4400 South Carolina Rembert C. Dennis Of?ce Building PO. Box 11549 Columbia, SC 29211-1549 (803) 734-3970 v/ South Dakota 1302 East Highway 14, Suite 1 Pierre, SD 57501-8501 (605) 773-3215 Tennessee 425 5th Avenue North Nashville, TN 37243 (615) 741-3491 Texas Capitol Station PO. Box 12548 Austin, TX 78711-2548 (512) 463-2100 Utah State Capitol, Room 236 Salt Lake City, UT 841 14-0810 (801) 538-9600 hgpz/lattomeygeneralutah.ggv/ Vermont 109 State Street Montpelier, VT 05609-1001 (802) 828-3173 Virginia 202 North Ninth Street Richmond, VA 23219 (804) 786-2071 Washington 1125 Washington Street SE PO. Box 40100 Olympia, WA 98504-0100 (360) 753-6200 West Virginia 1900 Kanawha Boulevard, Charleston, WV 25305 (304) 558-2021 Wisconsin State Capitol, Room 114 East P. O. Box 7857 Madison, W153707-7857 (608) 266-1221 wi Wyoming State Capitol Building Cheyenne, WY 82002 (307) 777-7841 992019