{"id":66042,"date":"2021-11-19T13:22:30","date_gmt":"2021-11-19T19:22:30","guid":{"rendered":"https:\/\/osteopathic.org\/?page_id=66042"},"modified":"2021-11-19T13:22:30","modified_gmt":"2021-11-19T19:22:30","slug":"security-notice","status":"publish","type":"page","link":"https:\/\/osteopathic.org\/about\/security-notice\/","title":{"rendered":"Security Notice"},"content":{"rendered":"

Notice of Data Event<\/h3>\n

American Osteopathic Association (\u201cAOA\u201d) is providing notice of a recent incident that may affect the security of certain information relating to AOA members.<\/p>\n

On June 25, 2020, AOA became aware of suspicious activity relating to certain information technology (IT) systems. Upon discovery, AOA worked with third-party forensic investigators to investigate the nature and scope of the activity and the AOA IT systems of interest. We determined that certain information within our systems was exfiltrated from our systems by an unauthorized actor. In response, we conducted a deliberate and thorough assessment of the information impacted during this event and to whom that information pertained. Like many businesses, the AOA experienced considerable challenges to AOA\u2019s normal business operations because of the COVID-19 pandemic. As a result, it has taken time for AOA to identify the names and addresses of potentially impacted individuals due to the pandemic\u2019s impact on our staff\u2019s working conditions, and their inability to be on location to identify all potentially impacted parties. On June 1, 2021, we confirmed that information relating to some organization members was impacted by this event. While we are unaware of any actual or attempted malicious use of member information as a result of this incident, we take the security of data we hold very seriously, and are notifying impacted parties out of an abundance of caution.<\/p>\n

While the information varied depending on the individual, AOA\u2019s investigation determined that at the time of the incident the impacted systems contained information including member names, and depending on the individual, Social Security number, financial account information, and email address\/username and password.<\/p>\n

The confidentiality, privacy, and security of personal information within our care is among AOA\u2019s highest priorities. Upon learning of the event, we investigated to determine those individuals that were affected, and secured the compromised accounts. We have taken additional steps to improve security and better protect against similar incidents in the future. In an abundance of caution, we are also notifying potentially affected individuals through this notice and other communications, so that potentially impacted parties can take further steps to best protect their personal information, should they feel it is appropriate to do so. Although we are unaware of any actual or attempted misuse of personal information as a result of this event, we arranged to have Kroll Information Assurance (Kroll) protect the identity of potentially impacted parties for 12 months at no cost as an added precaution.<\/p>\n

We encourage the potentially impacted parties to remain vigilant against incidents of identity theft and fraud by reviewing your account statements and monitoring your free credit reports for suspicious activity and to detect errors over the next 12 to 24 months. You may also review the information contained in the below Steps You Can Take to Protect Personal Information.<\/a><\/p>\n

You may have questions about this incident. Call this number if you have questions, 1-855-732-0719 between 9:00am and 6:30pm Eastern Time Monday through Friday, excluding major U.S. holidays. You may also write to AOA at 142 E. Ontario St. Chicago, IL 60611.<\/p>\n

Steps you can take to protect personal information<\/h3>\n

Under U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax, Experian, and TransUnion. To order your free credit report, visit www.annualcreditreport.com<\/a> or call, toll-free, 1-877-322-8228. You may also directly contact the three major credit reporting bureaus listed below to request a free copy of your credit report.<\/p>\n

Consumers have the right to place an initial or extended \u201cfraud alert\u201d on a credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer\u2019s credit file. Upon seeing a fraud alert display on a consumer\u2019s credit file, a business is required to take steps to verify the consumer\u2019s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any one of the three major credit reporting bureaus listed below.<\/p>\n

As an alternative to a fraud alert, consumers have the right to place a \u201ccredit freeze\u201d on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer\u2019s express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report. To request a security freeze, you will need to provide the following information:<\/p>\n

    \n
  1. Full name (including middle initial as well as Jr., Sr., II, III, etc.);<\/li>\n
  2. Social Security number;<\/li>\n
  3. Date of birth;<\/li>\n
  4. Addresses for the prior two to five years;<\/li>\n
  5. Proof of current address, such as a current utility bill or telephone bill;<\/li>\n
  6. A legible photocopy of a government-issued identification card (state driver\u2019s license or ID card, military identification, etc.); and<\/li>\n
  7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if you are a victim of identity theft.<\/li>\n<\/ol>\n

    Should you wish to place a fraud alert or credit freeze, please contact the three major credit reporting bureaus listed below:<\/p>\n