NOTICE OF DATA EVENT September 4, 2020 Artech L.L.C. (“Artech”) is posting the following statement to inform individuals of an event that could potentially affect the security of certain information. What Happened? On January 8, 2020, Artech received a report of unusual activity relating to an employee’s Artech user account. Artech immediately began investigating this report and through that investigation identified ransomware on certain Artech systems. That same day Artech engaged a leading third-party forensic investigation firm to assess the security of its systems and to confirm the nature and scope of the incident. On January 15, 2020, the investigation determined that an unauthorized actor had access to certain Artech systems between January 5, 2020, and January 8, 2020. Artech undertook a comprehensive review of these systems and determined that some personal information was present in them at the time of the incident. Artech reviewed this information and its internal records to identify the individuals associated with this information and their contact information for purposes of providing notice. On or around June 25, 2020, we completed this review and determined that personal information relating to certain individuals was contained in one or more of the involved files. What Information Was Involved? The investigation determined that at the time of the incident the involved files may have contained information including name, Social Security number, medical information, health insurance information, financial information, payment card information, driver’s license/state identification number, government issued identification number, passport number, visa number, electronic/digital signature, username and password information. The information varied by individual. To date, Artech is unaware of any actual or attempted misuse of personal information as a result of this incident. What Artech Is Doing. Artech takes this incident and the security of personal information in its care very seriously. Upon learning of this incident, Artech immediately commenced an investigation using external digital forensic specialists, changed system credentials and took steps to secure its systems and assess relevant company systems that may have been impacted by the event. Artech is also working with external digital forensic specialists to enhance existing security processes and protocols. Individuals who were determined to be potentially impacted by this event will receive written notice of the event by mail if a valid address existed. What Can You Do? Artech encourages individuals to remain vigilant against incidents of identity theft and fraud and to review account statements for suspicious activity. Under U.S. law individuals are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order a free credit report, individuals may visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. Individuals may also contact the three major credit bureaus directly to request a free copy of a credit report. Individuals have the right to place a “security freeze” on a credit report, which will prohibit a consumer reporting agency from releasing information in a credit report without express authorization. The security freeze is designed to prevent credit, loans, and services from being approved in a person’s name without consent. However, be aware that using a security freeze to take control over who gets access to the personal and financial information in a credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application a person makes regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, a person cannot be charged to place or lift a security freeze on a credit report. Should a person wish to place a security freeze, they may contact the major consumer reporting agencies listed below: Experian P.O. Box 9554 Allen, TX 75013 1-888-397-3742 www.experian.com/freeze/center.html TransUnion P.O. Box 160 Woodlyn, PA 19094 1-888-909-8872 www.transunion.com/creditfreeze Equifax P.O. Box 105788 Atlanta, GA 30348-5788 1-800-685-1111 www.equifax.com/personal/creditreport-services In order to request a security freeze, individuals will need to provide the following information: 1. 2. 3. 4. Full name (including middle initial as well as Jr., Sr., II, III, etc.); Social Security number; Date of birth; If a person has moved in the past five (5) years, the addresses they have lived over the prior five years; 5. Proof of current address, such as a current utility bill or telephone bill; 6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification, etc.); 7. If a person is the victim of identity theft, a copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft. As an alternative to a security freeze, individuals have the right to place an initial or extended “fraud alert” on a file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If an individual is the victim of identity theft, they are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should a person wish to place a fraud alert, they may contact any one of the agencies listed below: Experian P.O. Box 9554 Allen, TX 75013 1-888-397-3742 www.experian.com/fraud/ center.html TransUnion P.O. Box 2000 Chester, PA 19016 1-800-680-7289 www.transunion.com/ fraud-alerts Equifax P.O. Box 105069 Atlanta, GA 30348 1-888-766-0008 www.equifax.com/personal/ credit-report-services Individuals can obtain additional information regarding identity theft, fraud alerts, security freezes, and the steps that can be taken to protect themselves by contacting the consumer reporting agencies, the Federal Trade Commission, or the individual’s relevant state Attorney General. The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Individuals can obtain further information on how to file such a complaint by way of the contact information listed above. Individuals have the right to file a police report if they experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, individuals will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and the relevant state Attorney General. For More Information. Artech understands that you may have questions about this incident that are not addressed in this statement. If you have additional questions or would like to confirm if you are affected by this event, please call the dedicated assistance line at 1-877-547-0564 between 8:00 am and 5:30 pm Central Time Monday through Friday, excluding major U.S. holidays.