INFORMATION SECURITY NOTIFICATION
We are writing to let you know about a data security incident that may have involved personal information of yours maintained by the City of Marlow (“City” or “we”). Importantly, we are currently unaware of any actual misuse of your information. Nevertheless, we are reaching out to you so that you may take all measures you deem necessary to protect against possible identity theft, fraud and other unlawful or unauthorized conduct.
What Happened and What Information Was Involved.
On or about Saturday, November 30, 2024, the City suffered an attack on its internal computer systems as a result of a threat actor remotely gaining unauthorized access to a City computer. While we do not believe this attacker had access to all of the City’s internal files and systems, that attack could have included information about certain City residents such as names, addresses, social security numbers, and financial information. Because your information may have been stored in a file to which the attacker may have accessed, we are providing you with this notice out of an abundance of caution.
What We Are Doing.
Immediately upon learning of the situation, City staff contacted third party IT specialists to isolate and remediate the attack. The City then hired outside forensic specialists to investigate the attack with City personnel and the City’s IT specialists. The City’s investigation is ongoing but during that investigation we have discovered that the attacker may have had access to City information as noted above. As a result of the City’s efforts, however, we believe the incident has been contained and City systems prevented from further unauthorized access. Nevertheless, we encourage you to be diligent in monitoring for any suspicious activity concerning your information.
What You Can Do.
Included on the back page of this letter is a handout entitled “Steps You Can Take to Protect Your Information”. You may use the contact information set forth there to contact credit reporting and other agencies about fraud alerts, security freezes and other ways to protect against identity theft and other misuse of your personal information.
For More Information.
If you have further concern, or need any further assistance, please contact the City at 580-658-5401. We will endeavor to respond to your inquiries in a timely fashion. We sincerely regret any inconvenience or concern caused by this incident.
STEPS YOU CAN TAKE TO PROTECT YOUR INFORMATION
Review Your Account Statements and Notify Law Enforcement of Suspicious Activity
Review your financial account statements and credit reports closely. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. You also should promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, including your state attorney general and the Federal Trade Commission (FTC). To file a complaint with the FTC, go to IdentityTheft.gov or call 1-877-ID-THEFT (877-438-4338). Complaints filed with the FTC will be added to the FTC's Identity Theft Data Clearinghouse, which is a database made available to law enforcement agencies.
Obtain and Monitor Your Credit Report
You should obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting http://www.annualcreditreport.com, calling toll-free 877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You can access the request form at https://www.annualcreditreport.com/ request Report/requestForm.action. Or you can elect to purchase a copy of your credit report by contacting one of the three national credit reporting agencies. Contact information for the three national credit reporting agencies for the purpose of requesting a copy of your credit report or for general inquiries is provided below:
· Equifax, (866) 349-5191, www.equifax.com, P.O. Box 740241, Atlanta, GA 30374
· Experian, (888) 397-3742, www.experian.com, P.O. Box 2002, Allen, TX 75013
· TransUnion, (800) 888-4213, www.transunion.com, 2 Baldwin Place, P.O. Box 1000, Chester, PA 19016
Consider Placing a Fraud Alert on Your Credit Report
You may want to consider placing a fraud alert on your credit report. An initial fraud alert is free and will stay on your credit file for at least 90 days. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact any of the three credit reporting agencies identified above. Additional information is available at http://www.annualcreditreport.com.
Take Advantage of Additional Free Resources on Identity Theft
Review the tips provided by the Federal Trade Commission’s Consumer Information website, a valuable resource with some helpful tips on how to protect your information. Additional information is available at https://www.consumer.ftc.gov/topics/privacy-identity-online-security. For more information, please visit IdentityTheft.gov or call 1-877-ID-THEFT (877-438-4338).
Security Freeze
In some US states, you have the right to put a security freeze on your credit file. A security freeze (also known as a credit freeze) makes it harder for someone to open a new account in your name. It is designed to prevent potential creditors from accessing your credit report without your consent. As a result, using a security freeze may interfere with or delay your ability to apply for a new credit card, wireless phone, or any service that requires a credit check. You must separately place a security freeze on your credit file with each credit reporting agency. To place a security freeze, you may contact one of the three credit reporting agencies identified above. You may be required to provide information that identifies you including your full name, social security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement, or insurance statement. Depending on where you live, there should be no charge to request a security freeze or to remove a security freeze.