University System of Maryland Office
A Guide for USM and Foundation Staff: Update on UMCP Data Breach
On February 18th, 2014 The University of Maryland, College Park reported an intrusion into one of its database servers where
personal information was stored. Stolen data consisted of the following: Social Security Number; Name; Date of Birth; and University
Identification Number. The data were contained in one table used to house university ID numbers issued to faculty, staff and
students since 1998.
Immediate steps you should take to protect yourself
To help protect your identity, UMCP is offering a free, five-year membership of Experian's® ProtectMyID® Alert. This
product helps detect possible misuse of your personal information and provides you with superior identity protection
support focused on immediate identification and resolution of identity theft.
Please call Experian at 1-866-274-3891 (Monday-Friday 9:00 am-9:00 pm EST and Saturday-Sunday 11:00 am-8:00 pm EST)
to determine if your records were compromised and to register for your free credit protection service. You must activate
this service by 11:59 pm EST on May 31, 2014.
For a complete explanation of this event, please refer to the UMCP Incident website on the Data Breach.
This web page is being updated on a regular basis and includes a comprehensive section of Frequently Asked Questions.
Actions to help reduce your chances of identity theft
- PLACE A 90-DAY FRAUD ALERT ON YOUR CREDIT FILE
—An initial 90 day security alert indicates to anyone requesting your credit file that you suspect you are a victim of fraud. When you or someone else attempts to open a credit account in your name, increase the credit limit on an existing account, or obtain a new card on an existing account, the lender should takes steps to verify that you have authorized the request. If the creditor cannot verify this, the request should not be satisfied. You may contact one of the credit reporting companies below for assistance.
- PLACE A SECURITY FREEZE ON YOUR CREDIT FILE
—If you are very concerned about becoming a victim of fraud or identity theft, a security freeze might be right for you. Placing a freeze on your credit report will prevent lenders and others from accessing your credit report entirely, which will prevent them from extending credit. With a Security Freeze in place, you will be required to take special steps when you wish to apply for any type of credit. This process is also completed through each of the credit reporting companies.
- ORDER YOUR FREE ANNUAL CREDIT REPORTS
—Visit www.annualcreditreport.com or call 877-322-8228.
Once you receive your credit reports, review them for discrepancies. Identify any accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is correct. If you have questions or notice incorrect information, contact the credit reporting company.
- MANAGE YOUR PERSONAL INFORMATION
—Take steps such as: carrying only essential documents with you; being aware of whom you are sharing your personal information with and shredding receipts, statements, and other sensitive information.
- USE TOOLS FROM CREDIT PROVIDERS
—Carefully review your credit reports and bank, credit card and other account statements. Be proactive and create alerts on credit cards and bank accounts to notify you of activity. If you discover unauthorized or suspicious activity on your credit report or by any other means, file an identity theft report with your local police and contact a credit reporting company.
- OBTAIN MORE INFORMATION ABOUT IDENTITY THEFT AND WAYS TO PROTECT YOURSELF
—Visit www.experian.com/credit-advice/topic-fraud-and-identity-theft.html for general information regarding protecting your identity.
—The Federal Trade Commission has an identity theft hotline: 877-438-4338; TTY: 1-866-653-4261. They also provide information on-line at www.ftc.gov/idtheft.
Attorney General Douglas F. Gansler recently advised all consumers to take some basic steps that could protect their information from being misused, now or in the future. Review the tips here: www.oag.state.md.us/Press/2014/022014.html
Credit Card Fraud and Identity Theft - Informational Resources
The theft of personal data is very serious. The theft of credit/debit card numbers from retailers such as Target affected millions
of their customers and resulted in charges made against many of those accounts. In the Target case, the participating banks
scrambled to cancel or change those numbers by issuing new cards to their members.You, or someone you know, may have been
affected during the Target incident.
Three of the four pieces of data taken are critical when one opens a bank or credit account. The Federal Trade Commission (FTC)
has created a comprehensive website that discusses the theft of social security numbers and identity theft. The site,
FTC - Identity Theft, provides information to help
consumers better understand the problem of
identity theft and how social security numbers are used by thieves. It also suggests actions you should take to protect
yourself if you think identity thieves might be using your personal information.
Once you have reviewed the information provided on the FTC website, it is important to remember that an event such as the
theft of personal information, especially social security numbers, is very serious. Remain vigilant and review your
personal credit information through the three credit reporting agencies. Please make use of the credit monitoring services paid for
by UMCP during the next year.
Links to Credit Reporting and Credit Monitoring Agencies
Below are links and toll-free numbers to help you contact the major credit reporting agencies. By law you may receive a free credit
report every year from each agency. Avail yourself to these reports. If you think there is something incorrect, challenge the item. These
companies are usually very accurate, but mistakes can be made.
Equifax - 1.800.525.6275
Experian - 1.888.397.3742
TransUnion - 1.800.680.7289
At the bottom of this section are links to two sites that have reviewed and scored what they consider to be the top 10 credit
monitoring services available. These credit monitoring services offer an added degree of protection. They can alert you when
someone tries to open a bank or credit account in your name or makes purchases that to deviate from your typical purchase history.
Remember, no service can provide 100% protection. Think of these services like the locks on your front door. Use them for added security.
Two links provided by the online customer review services, NextAdvisor and Top-Ten Reviews, provide reviews of highly rated credit
monitoring agencies. NextAdvisor has also prepared a handy FAQ about
the essentials of the credit monitoring process.
Top 10 Reviews - Identity Theft Protection Services
Next Advisors Reviews of Credit Monitoring Companies
Four highly rated credit monitoring companies
Identity Guard
Experian - ProtectMyID @ 1.866.274.3891
Identity Force
LifeLock
INOVA's Employee Assistance Program
Sometimes, no matter how many precautions we take, unexpected events overtake us. What can you do if your personal information
has been stolen and you discover that you've been compromised? Two Acrobat documents provided by USMO's Human Resources Office introduce
INOVA's Employee Assistance Program.
INOVA ID Recovery
Legal, Financial & ID Revcovery
These documents were produced as part of USM's new partnership with the INOVA Employee Assistance Program and you are
encouraged to access the INOVA website and the section called
"Fraud & Alert." A personal log-in process is required with INOVA. Please log in with the User ID of USMEAP and
the password UMSO. Then, on the blue bar across the top of
the page, go to the "Living" tab and, on the drop down box, click "Fraud & Alert."