GE People Operations One River Road Schenectady, NY 12345 March 20, 2020 NOTICE OF DATA BREACH Recently GE was informed that one of our service providers, Canon Business Process Services, Inc. (“Canon”), experienced a data security incident. GE contracts with Canon to process documents of GE employees, former employees and beneficiaries entitled to benefits. The issue did not affect GE’s own systems. What Happened? We were notified on February 28, 2020 that Canon had determined that, between approximately February 3 - 14, 2020, an unauthorized party gained access to an email account that contained documents of certain GE employees, former employees and beneficiaries entitled to benefits that were maintained on Canon’s systems. What Information Was Involved? Canon has indicated that the affected documents, which contained certain personal information, were uploaded by or for GE employees, former employees and beneficiaries entitled to benefits in connection with Canon’s workflow routing service. The relevant personal information, which was contained in documents such as direct deposit forms, driver’s licenses, passports, birth certificates, marriage certificates, death certificates, medical child support orders, tax withholding forms, beneficiary designation forms and applications for benefits such as retirement, severance and death benefits with related forms and documents, may have included names, addresses, Social Security numbers, driver’s license numbers, bank account numbers, passport numbers, dates of birth, and other information contained in the relevant forms. What We Are Doing After learning of the issue, we quickly began working with Canon to identify the affected GE employees, former employees and beneficiaries. We understand that Canon took steps to secure its systems and determine the nature of the issue. Canon also retained a data security expert to conduct a forensic investigation. GE systems, including your personal information in our systems, have not been affected by the Canon data security incident. We will work hard to understand how the unauthorized individual was able to access Canon’s systems. We are taking steps to help ensure appropriate measures are implemented to prevent a reoccurrence of this kind of incident. What You Can Do We take our obligation to safeguard personal information very seriously and are alerting you about this issue so you can take steps to help protect yourself. You are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting agencies. To order your free credit report, visit www.annualcreditreport.com or call toll-free at 1-877-322-8228. We encourage you to remain vigilant by reviewing your account statements and monitoring your free credit reports. At our request, Canon is offering identity protection and credit monitoring services to affected individuals for two years at no cost to you through a company called Experian. The attached Reference Guide provides information on registration and the June 30, 2020 deadline to take advantage of these services. For More Information We regret this incident occurred and regret any inconvenience or concern this has caused you. If you have any questions, please call 1-800-432-3450 between 9AM and 5PM Eastern time, Monday through Friday. Sincerely, Paul Davies Head of People Operations Reference Guide To help protect your identity, Canon is offering a complimentary two-year membership of Experian IdentityWorksSM Credit 3B. This product helps detect possible misuse of your personal information and provides you with superior identity protection support focused on immediate identification and resolution of identity theft. The activation code below can be used by you and others who were impacted by this incident. If you submitted personal information of other individuals with your information, they are entitled to IdentityWorks coverage and can use the information below to enroll. Please be sure to share this with those individuals as needed. Activate IdentityWorks Credit 3B Now in Three Easy Steps 1. ENROLL by: 6/30/2020 (Your code will not work after this date.) 2. VISIT the Experian IdentityWorks website to enroll: https://www.experianidworks.com/3bcredit 3. PROVIDE the Activation Code: If you have questions about the product, need assistance with identity restoration or would like an alternative to enrolling in Experian IdentityWorks online, please contact Experian’s customer care team at 877-288-8057. Be prepared to provide engagement number as proof of eligibility for the identity restoration services by Experian. ADDITIONAL DETAILS REGARDING YOUR 24-MONTH EXPERIAN IDENTITYWORKS CREDIT 3B MEMBERSHIP: A credit card is not required for enrollment in Experian IdentityWorks Credit 3B. You can contact Experian immediately without needing to enroll in the product regarding any fraud issues. Identity Restoration specialists are available to help you address credit and non-credit related fraud. Once you enroll in Experian IdentityWorks, you will have access to the following additional features:  Experian credit report at signup: See what information is associated with your credit file. Daily credit reports are available for online members only.*  Credit Monitoring: Actively monitors Experian, Equifax and Transunion files for indicators of fraud.  Experian IdentityWorks ExtendCARETM: You receive the same high-level of Identity Restoration support even after your Experian IdentityWorks membership has expired.  $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized electronic fund transfers. Activate your membership today at https://www.experianidworks.com/3bcredit or call 877-288-8057 to register with the activation code above. What you can do to protect your information: There are additional actions you can consider taking to reduce the chances of identity theft or fraud on your account(s). Please refer to www.ExperianIDWorks.com/restoration for this information. If you have any questions about IdentityWorks, need help understanding something on your credit report or suspect that an item on your credit report may be fraudulent, please contact Experian’s customer care team at 877-288-8057.* Offline members will be eligible to call for additional reports quarterly after enrolling. ** The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions. Order Your Free Credit Report. To order your free credit report, visit www.annualcreditreport.com, call toll-free at 1-877-322-8228, or complete the Annual Credit Report Request Form on the U.S. Federal Trade Commission’s (“FTC”) website at www.consumer.ftc.gov and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. The three consumer reporting agencies provide free annual credit reports only through the website, toll-free number or request form. When you receive your credit report, review it carefully. Look for accounts you did not open. Look in the “inquiries” section for names of creditors from whom you haven’t requested credit. Some companies bill under names other than their store or commercial names. The consumer reporting agency will be able to tell you when that is the case. Look in the “personal information” section for any inaccuracies in your information (such as home address and Social Security number). If you see anything you do not understand, call the consumer reporting agency at the telephone number on the report. Errors in this information may be a warning sign of possible identity theft. You should notify the consumer reporting agencies of any inaccuracies in your report, whether due to error or fraud, as soon as possible so the information can be investigated and, if found to be in error, corrected. If there are accounts or charges you did not authorize, immediately notify the appropriate consumer reporting agency by telephone and in writing. Consumer reporting agency staff will review your report with you. If the information can’t be explained, then you will need to call the creditors involved. Information that can’t be explained also should be reported to your local police or sheriff’s office because it may signal criminal activity. Report Incidents. If you detect any unauthorized transactions in a financial account, promptly notify your payment card company or financial institution. If you detect any incident of identity theft or fraud, promptly report the incident to law enforcement, the FTC and your state Attorney General. If you believe your identity has been stolen, the FTC recommends that you take these steps:  Close the accounts that you have confirmed or believe have been tampered with or opened fraudulently. For streamlined checklists and sample letters to help guide you through the recovery process, please visit https://www.identitytheft.gov/.  File a local police report. Obtain a copy of the police report and submit it to your creditors and any others that may require proof of the identity theft crime. You can contact the FTC to learn more about how to protect yourself from becoming a victim of identity theft and how to repair identity theft: Federal Trade Commission Consumer Response Center 600 Pennsylvania Avenue, NW Washington, DC 20580 1-877-IDTHEFT (438-4338) www.ftc.gov/idtheft/ Consider Placing a Fraud Alert on Your Credit File. To protect yourself from possible identity theft, consider placing a fraud alert on your credit file. A fraud alert helps protect you against the possibility of an identity thief opening new credit accounts in your name. When a merchant checks the credit history of someone applying for credit, the merchant gets a notice that the applicant may be the victim of identity theft. The alert notifies the merchant to take steps to verify the identity of the applicant. You can place a fraud alert on your credit report by calling any one of the toll-free numbers provided below. You will reach an automated telephone system that allows you to flag your file with a fraud alert at all three consumer reporting agencies. For more information on fraud alerts, you also may contact the FTC as described above. Equifax Experian TransUnion Equifax Information Services LLC P.O. Box 740241 Atlanta, GA 30374 Experian Inc. P.O. Box 9554 Allen, TX 75013 TransUnion LLC P.O. Box 2000 Chester, PA 19016 1-800-525-6285 www.equifax.com 1-888-397-3742 www.experian.com 1-800-680-7289 www.transunion.com Consider Placing a Security Freeze on Your Credit File. You may wish to place a “security freeze” (also known as a “credit freeze”) on your credit file. A security freeze is designed to prevent potential creditors from accessing your credit file at the consumer reporting agencies without your consent. Unlike a fraud alert, you must place a security freeze on your credit file at each consumer reporting agency individually. There is no charge to place or lift a security freeze. For more information on security freezes, you may contact the three nationwide consumer reporting agencies or the FTC as described above. As the instructions for establishing a security freeze differ from state to state, please contact the three nationwide consumer reporting agencies to find out more information. The consumer reporting agencies may require proper identification prior to honoring your request. For example, you may be asked to provide:  Your full name with middle initial and generation (such as Jr., Sr., II, III)  Your Social Security number  Your date of birth  Addresses where you have lived over the past five years  A legible copy of a government-issued identification card (such as a state driver’s license or military ID card)  Proof of your current residential address (such as a current utility bill or account statement) For Iowa Residents. You may contact law enforcement or the Iowa Attorney General’s Office to report suspected incidents of identity theft. This office can be reached at: Office of the Attorney General of Iowa Hoover State Office Building 1305 E. Walnut Street Des Moines, IA 50319 (515) 281-5164 www.iowaattorneygeneral.gov For Maryland Residents. You can obtain information from the Maryland Office of the Attorney General about steps you can take to avoid identity theft. You may contact the Maryland Attorney General at: Maryland Office of the Attorney General Consumer Protection Division 200 St. Paul Place Baltimore, MD 21202 (888) 743-0023 (toll-free in Maryland) (410) 576-6300 www.oag.state.md.us For Massachusetts Residents. You have the right to obtain a police report and request a security freeze as described above. The consumer reporting agencies may require that you provide certain personal information (such as your name, Social Security number, date of birth, and address) and proper identification (such as a copy of a government-issued ID card and a bill or statement) prior to honoring your request to place a security freeze on your account. For New Mexico Residents. You have rights under the federal Fair Credit Reporting Act (“FCRA”). These include, among others, the right to know what is in your file; to dispute incomplete or inaccurate information; and to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For more information about the FCRA, please visit https://www.consumer.ftc.gov/articles/pdf-0096-fair-credit-reportingact.pdf or www.ftc.gov. For New York Residents. You can obtain information from the New York State Office of the Attorney General about how to protect yourself from identity theft and tips on how to protect your privacy online. You can contact the New York State Office of the Attorney General at: Office of the Attorney General The Capitol Albany, NY 12224-0341 1-800-771-7755 (toll-free) 1-800-788-9898 (TDD/TTY toll-free line) https://ag.ny.gov/ Bureau of Internet and Technology (BIT) 28 Liberty Street New York, NY 10005 Phone: (212) 416-8433 https://ag.ny.gov/internet/resource-center For North Carolina Residents. You can obtain information from the North Carolina Attorney General’s Office about preventing identity theft. You can contact the North Carolina Attorney General at: North Carolina Attorney General’s Office 9001 Mail Service Center Raleigh, NC 27699-9001 (877) 566-7226 (toll-free in North Carolina) (919) 716-6400 www.ncdoj.gov For Oregon Residents. We encourage you to report suspected identity theft to the Oregon Attorney General at: Oregon Department of Justice 1162 Court Street NE Salem, OR 97301-4096 (877) 877-9392 (toll-free in Oregon) (503) 378-4400 http://www.doj.state.or.us For Rhode Island Residents. You may obtain information about preventing and avoiding identity theft from the Rhode Island Office of the Attorney General at: Rhode Island Office of the Attorney General Consumer Protection Unit 150 South Main Street Providence, RI 02903 (401)-274-4400 http://www.riag.ri.gov You have the right to obtain a police report and request a security freeze as described above. The consumer reporting agencies may require that you provide certain personal information (such as your name, Social Security number, date of birth, and address) and proper identification (such as a copy of a government-issued ID card and a bill or statement) prior to honoring your request for a security freeze on your account.