Strategic Analysis, Inc. Provides Notice Of Data Event

ARLINGTON, Va., July 13, 2018 /PRNewswire/ -- Strategic Analysis, Inc. ("SA") is providing notice of an event involving the potential exposure of certain personal information. To date, SA has not received any reports that the information has been misused.

What Happened?  On November 23, 2017, Strategic Analysis ("SA") received indications of suspicious activity involving certain systems in their IT infrastructure. SA promptly launched an internal investigation and engaged cybersecurity forensic firms to assist in assessing the potential security event and to secure any potentially affected accounts, systems, and data. During the course of the investigation, SA became aware of unauthorized access to a number of SA accounts, systems, and data beginning April 20, 2015 and continuing through January 16, 2018.

What Information Was Involved? The investigation identified that the data that could have been subject to unauthorized access includes individual Social Security numbers, driver's license and/or state issued identification numbers, dates of birth, passport numbers, bank account numbers, and routing numbers.  SA has not received any evidence that personal information was targeted or that personal information has been subject to misuse by any unauthorized individuals.

What is SA Doing.  With guidance from and in coordination with outside cybersecurity forensic firms, SA worked diligently and responsibly to secure SA's accounts, systems and data. SA confirmed the actions taken to respond to this event were successful and their accounts, systems and data were secure on March 23, 2018 and SA accounts, systems and data were not subject to unauthorized access as of January 16, 2018.

SA moved quickly to confirm whether personal information may have been affected by this event, to identify the individuals related to this personal information, to put in place resources to assist them, and to provide them with notice of this incident. SA mailed written notice to those individuals for whom the ongoing review revealed had personally identifiable information potentially subject to unauthorized access. This notice includes an offer of access to one year of credit and identity monitoring services, including identity restoration services, through AllClear ID. SA also established a dedicated hotline for potentially affected individuals to contact with questions or concerns regarding this incident.

What Can I Do to Protect My Information. Additional information can be found in the Steps You Can Take To Protect Your Information below. 

For More Information. If you have additional questions, including whether you may have been impacted by this event, please contact [email protected] or call our dedicated assistance line at 1-855-865-6892 (toll-free) Monday through Friday between 9 a.m. and 9 p.m. EST.

STEPS YOU CAN TAKE TO PROTECT YOUR INFORMATION

We encourage potentially impacted individuals to remain vigilant against incidents of identity theft and fraud by reviewing their account statements and monitoring their free credit reports for suspicious activity over the next 12 to 24 months. Under U.S. law, individuals are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order a free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. Individuals may also contact the three major credit bureaus directly to request a free copy of their credit report. The credit reporting agencies may be contacted as follows:

Potentially impacted individuals may also find information regarding identity theft, fraud alerts, security freezes and the steps they may take to protect their information by contacting the credit agencies, and the Federal Trade Commission.  The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission encourages those who discover that their information has been misused to file a complaint with them. Instances of known or suspected identity theft should be promptly reported to law enforcement, the Federal Trade Commission, and your state Attorney General. You have the right to file a police report if you ever experience identity theft or fraud.  Please note that in order to file a crime report or incident report with law enforcement for identity theft, you will likely need to provide some kind of proof that you have been a victim.  This notice has not been delayed as the result of a law enforcement investigation.   

For Maryland residents, the Maryland Attorney General can be reached at: 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; 1-888-743-0023; and www.oag.state.md.us. Strategic Analysis is located at 4075 Wilson Boulevard, Suite 200, Arlington, Virginia 22203. 

For North Carolina residents, the North Carolina Attorney General can be contacted by mail at 9001 Mail Service Center, Raleigh, NC 27699-9001; by phone toll-free at 1-877-566-7226; by phone at 1-919-716-6400; and online at www.ncdoj.gov. 

For Rhode Island residents, the Rhode Island Attorney General can be contacted by mail at 150 South Main Street, Providence, RI 02903; by phone at (401) 274-4400; and online at www.riag.ri.gov. A total of two (2) Rhode Island residents are potentially impacted by this incident. You have the right to file and obtain a police report if you ever experience identity theft or fraud. Please note that, in order to file a crime report or incident report with law enforcement for identity theft, you may be asked to provide some kind of proof that you have been a victim. 

For New Mexico residents, you have rights pursuant to the Fair Credit Reporting Act, such as the right to be told if information in your credit file has been used against you, the right to know what is in your credit file, the right to ask for your credit score, and the right to dispute incomplete or inaccurate information. Further, pursuant to the Fair Credit Reporting Act: the consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable information; consumer reporting agencies may not report outdated negative information; access to your file is limited; you must give your consent for credit reports to be provided to employers; you may limit "prescreened" offers of credit and insurance you get based on information in your credit report; and you may seek damages from a violator. You may have additional rights under the Fair Credit Reporting Act not summarized here. Identity theft victims and active duty military personnel have specific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review your rights pursuant to the Fair Credit Reporting Act by visiting www.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf, or by writing to the Consumer Response Center, Room 130-A, Federal Trade Commission, 600 Pennsylvania Ave. N.W., Washington. 

For Massachusetts residents, you have the right to file and obtain a police report if you ever experience identity theft or fraud.  Please note that, in order to file a crime report or incident report with law enforcement for identity theft, you may be asked to provide some kind of proof that you have been a victim.  If you have been the victim of identity theft, and you provide a credit reporting agency with a valid police report, it cannot charge you to place, lift or remove a security freeze.  In all other cases, a credit reporting agency may charge up to $5 to place, temporarily lift, or permanently remove a security freeze.  The credit reporting agencies have three (3) business days after receiving your request to place a security freeze on your credit file report.  The credit bureaus must also send written confirmation to you within five (5) business days and provide you with a unique personal identification number (PIN) or password, or both, that can be used by you to authorize the removal or lifting of the security freeze.  To lift the security freeze in order to allow a specific entity or individual access to your credit report, you must call or send a written request to the credit reporting agencies by mail and include proper identification (name, address, and Social Security number) and the PIN number or password provided to you when you placed the security freeze, as well as the identities of those entities or individuals you would like to receive your credit report or the specific period of time you want the credit report available.  To remove the security freeze, you must send a written request to each of the three credit bureaus by mail and include proper identification (name, address, and Social Security number) and the PIN number or password provided to you when you placed the security freeze.  The credit bureaus have three (3) business days after receiving your request to remove the security freeze.

SOURCE Strategic Analysis, Inc.