application/pdf 2009-05-08T04:37:28-05:00 1 New York Data Breach Notification : Website hack provides unauthorised user access to personal information. InterActive-Financial-FS.pdf xi ` c~`,{`-§ -.` yn . • • I D ’·¢·== F1I1&11C18.l `\~— ~~~— — .Marketing Group August 18, 2008 New York State Consumer Protection Board (CPB) SECURITY BREACH NOTIFICATION . 1740 Broadway, 15th floor New York, NY 10019 Re: Security Breach State Agency Notice Dear Sir/Madam: Pursuant to N.Y. Gen. Bus. Law §899—aa, lnterActive Financial Marketing Group, a division of Dominion Enterprises located in Richmond, Virginia, is writing to notify you of a security breach that involves the information of New York residents. InterActive Financial Marketing Group acts as a lead generation source for automobile dealers who finance the sale of their motor vehicles to consumers in various states, including New York. On various dates between November 2007 and February 2008, aniunknown and unauthorized third party hacked into and gained access to one of our computer servers. This server is used to store information we receive from consumers through our websites. The illegally accessed electronic data includes the names, addresses, birthdates, and social security numbers of our consumers. No consumer credit card account information was stored on the illegally accessed server. The number of Yerk residents affected is 5,7515 as of the date of this notice. We have sent, or will soon send, written notice of this security breach to all identified consumers. A copy of our consumer notice letter is enclosed with this letter. We are also notifying each of the three nationwide credit reporting agencies about the timing, content, and distribution of our consumer notices. We have engaged a computer security and forensics expert to help investigate the scope, nature and cause of this unauthorized intrusion into our computer server. We have implemented enhanced network configuration, database, and software security measures and will continue to devote resources to prevent a similar security breach in the future. None of our consumers has informed us that anythird party has made unauthorized use of their information as ofthe date of this notice, but we are offering all identified consumers access to credit monitoring services for one year at our expense. Our consumer notice letter also supplies those people with a toll-free telephone number and our contact information if they have any further questions or want additional assistance. 114 Virginia Street | Richmond, VA 23219 | ph 804.225.1880 ] fax 804.225.1 885 www.carloan.com www.auto|oan.<:om 1800—Auto—Loan www.InterActivefmg.com < ‘‘‘‘‘= FIIIGIICIRI M¤*<~=¤¤s Gmur We have mailed a similar notice of this security breach to the New York State Attorney General’s Office and the New York State Office of Cyber Security & Critical Infrastructure Coordination. Please contact Rich Crawford at (7 57) 351-8093 if you have any questions regarding this letter. Si¥?§?lZ€§+>"? , fr? lr;,t+;€rAct1ve Financial Mafketing Group "°€P" . Enclosure 0 RC/kai 1 14 Virginia Street R.ichmond,VA 23219 ph $04225.1880 fax $04225.1885 .. www.car1oan.crim wvvw.autoloan.ccrn 1800-Auto-Loan www.1nter·Activeting.com ...— _,____ e v , _, vi ` ``·== ·==== §§§€@§“£€§.¤’§§ §§ii.°’i&§.°iL§@.§ ${3-¥Ti¥<i¥5xig G;rz>;g§i August 19, 2008 You previcueiy subrriiitteci your persnnei information to ir1terAc:iive Finericiei Marketing Greup {"!Fi‘»4G") i;.hmug,ii cerieerncem. i em wriiirig te edvise yam of am incident thai may effect your pee ecnei information Between November of 2OOT and February 2008, an unknown third party gained access to one of our cemputer sewers without eintimrizarien. This server was used to store information we receive frem eppiieents tnmugn our websites. The iiiegeiiy accessed date ineiudes the information you pre vided on your credit eppiieeticri, such es your name, address, birth date and scieiei security number. We have investigated ine scope, nature and cause cf this unauthorized intrusion inte our computer server. We have impiemented edriiiinnei security measures end wiii continue te devote eii eveii- eiziie resources rc prevent this type caf event frcrn occurring in the future. We do net know whether your information nes been iiiegaiiy used, but yeur information may have been accessed. HZMG is advising you ef this incident so that you may take steps to guard against any gmteniiei risk resuiiing, from this inczideiit. As a precaution, to help yeas detect any peseibie misuse cf your deze, BFMCS has arranged for you ie enmii in credit monimring for one fuii yeer, et ne cast to you. S;;ieeiii<>eiiy, we have engaged Cow s¤meriiif0.ceni, inc., en Experieneii ccimpeny, to provide you with ite Trigziie Aiertm product wiiieii in ciucies, among other niferings, deiiy mcmimring of yeur credit remit from eii three nationwide credit ‘ reporting cempenies {Ex;:serien®, i€c;uife><®, and TreneLinien®), emeii aierie ei key changes in your credit reports, itoii-free access in e dedicated team ef fraud resoiution representatives, and $25,0GO i<;ientit5#Tizei°t1ne¤renue provided by Virginia Surety Company, Eric. {Due $0 New York siaate iews restrictions, identity Theft insurance and Guarantee ceverege cannot be offered to New York residents. AES either benefits or Tripie Aiea are eveiiabie io you.} The free credit monitoring ercnduct must be ectiveted within 90 days ef the date ef this ietier. To sign up, pieese visit igigiggggfggeniwer.censuniei`infc>.<:0nigiE;/LQ and enter yciur individuei activation code provided beiew, Pieese keep in mind Thani ence activated, the code cannot be reused. You wiii be instructed en new to enmii in your compiinieniery credit monitoring prr>ducL if you sign up, eii credit reports and aime wiii be delivered vie emeii. ° Your Siiwe Use Credit, ivinnimnng Activation Code: _ ` if yer.: have any questions, you may caii the dedicated Privacy Heip Line et 8€@—5?8—54G?. Ger repre- sentatives wifi be eveiienie to assist. you Monday through Friney, between 6 em. end 6 gmm, PT, Regerdiessz ef whether you elect to erimii in the credit mcnétering ;;·r·0<ium;, iiiiviili strongly recom- merxcis that you resriziiri vigiierit and regtzieriy review arid monitor your credit reports end eeeeum statements te guar:} egeirzet any urretitircrizeci trerisectiens or activity. you detect any suspicious activity cm en eeccztmt, you shwiai promptly notify the fimaneiai institution er comgzerzy with which the account is meirataineci., Yam elec shmsid premptiy report tseuciuierit activity te proper iew err fercernent authorities, iriciuding the Federzz! Tracie Commission. You can ieem more about mw to rirtsteczt yemeeif frem tzecemirig e victim or identity theft et the FTC‘s website: img:i·’,f»vv»riviftcrgey’; ggggggigniieresite_g;jg;hei°t_{{. You are eise emitted imaier U,S` iw to one free credit report erimraiiy from each at the three mejcrr credit bureaus. To order your free credit report, visit _vg;rw.enmie§i:re_irtitre;;crt,r:eni er ceii teiiiree (BY?) 322-8228. Cir you may cbteiri zi free credit report by ceiiing may cme ef the three nantienai credit reporting eamzgzeiiies et the fciiciwmg tot? tree numbers: Equifex® et {SOO} 6B§—iti3.11; E><— perizm® at {S88}3Q7~3?-432; and TrerisUnie¤® et {800) Q1€`>S800. in addition to Obtaining e free credit report, yam may cement any ef the three ztetienei iziecéit repost ing ccimpamies to piece a "r°muc§ are-art" en your censumei credit fite. This writ eiert creditors teiie eciciitieatei steps te verify the identity of anyone who epgriées for credit in your mime. There is ne charge for piecéng as traauci eiert ers your consumer credit fiiee, The etmtaet information of the new tienai credit reperting cemperxies for purpmses of piecing e fraud eiert on your account is: Equifax Experian Trensténien RC3. Bax M5059 Fat}. Box 3.017 s P.C>. Eicix 5?Qt3 Atizmte., GA 303·¢S-5059 Meri, TX 7€>i33.I3 Fuiiemm, QA 92834 {BOO} 525~·i·3285 (SSS} 3§r`?—3`i’<i2 (800) &3SO·?`28Q htt : www,e uifazx.e0rra http: ' wwwex eriertcerrr ‘ htt : m reneuriien.cem These credit reporting egeneies can eiecs provide you with istfermetien about the steps you can take if you eise went tc piece as security freeze cm your credit fiie and the cost fer daring ee. Protecting the gtrivecy amd security ef your information is extremeiy important te us. {FMS wishes to reiterate that it hee mt ieemed ation': any misuse ef your peiemriei infmrmetiem ast this time and that SFMG is te§<~ ing apprcigsiriete remeciiei steps, iitciuding enhancing security prcteeoie. Ori iseheif ef EFMG, i epeiegize fer any isrcerwerrierice er cerseern that this matter may masse for you. Ae noted, if yet: have eny questions, pieeee feei free to eeritect the cietiicetee Privacy Heir: Line et 8€i5»5`?B·-54GT, which hes been estebiished to assist you, Thank yet: very much. Sineereiy, __ §rZ,4?;g§:§w ..: ·__.R` M"#;~;M Q ittiiti Rich Crewferti interziictive Finenciei Marketing Group 1754 true 5755 6 key-2ce4350plom3lu46zvic 15080098 2732873 2008-08-18T00:00:00-05:00 2009-06-01T22:40:50-05:00