Computer Intrusion
NOTIFICATION OF SECURITY BREACH PURSUANT TO MASSACHUSETTS GENERAL LAWS CHAPTER 93H
The University of Massachusetts Amherst (the “University”) hereby provides notice that a breach of security regarding personal information of students attending the University during the period 1982-2002 and a few students prior to 1982 occurred from September 15, 2008 to October 27, 2008.
Under Massachusetts law, you have the right to obtain any police report filed in regard to this incident. If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it.
Massachusetts law also allows you to place a security freeze on your credit reports. A security freeze prohibits a credit reporting agency from releasing any information from your credit report without written authorization. Be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit mortgages, employment, housing, or other services.
If you have been a victim of identity theft, and you provide the credit reporting agency with a valid police report, it cannot charge you to place, lift, or remove a security freeze. In all other instances, a credit reporting agency may charge you up to $5.00 each to place, temporarily lift, or permanently remove a security freeze. If you have not been a victim of identity theft, you will need to include payment to the credit reporting agency to place, lift, or remove a security freeze by check, money order, or credit card (Visa, MasterCard, American Express, or Discover only). DO NOT SEND CASH THROUGH THE MAIL.
To place a security freeze on your credit report, you must send a written request to each of the three major reporting agencies by regular, certified, or overnight mail at the addresses below:
Equifax Security Freeze
P.O. Box 105788
Atlanta, GA 30348
(www.equifax.com)
Experian Security Freeze
P.O. Box 9554
Allen, TX 75013
(www.experian.com)
Trans Union Security Freeze
Fraud Victim Assistance Department
P.O. Box 6790
Fullerton, CA 92834
(www.transunion.com)
In order to request a security freeze, you will need to provide the following information:
1. Your full name (including middle initial as well as Jr., Sr., II, III, etc.)
2. Social Security Number.
3. Date of birth.
4. If you have moved in the past five (5) years, provide the addresses where you have lived over the prior five years.
5. Proof of current address such as a current utility bill or telephone bill.
6. A legible photocopy of a government issued identification card (state driver’s license or ID card, military identification, etc.).
7. If you are a victim of identity theft, include a copy of the police report, investigative report, or complaint to a law enforcement agency concerning identity theft.
The credut reporting agencies have three (3) business days after receiving your request to place a security freeze on your credit report. The credit bureaus must also send written confirmation to you within five (5) business days and provide you with a unique personal identification number (“PIN”) or password or both that can be used by you to authorize the removal or lifting of the security freeze.
To lift the security freeze in order to allow a specific entity or individual access to your credit report, you must call or send a written request to the credit reporting agencies by mail and include proper identification (name, address, and social security number) and the PIN number or password provide to you when you placed the security freeze as well as the identity of those entities or individuals you would like to receive your credit report or the specific period of time you want the credit report available. The credit reporting agencies have three (3) business days after receiving your request to lift the security freeze for those identified entities or for the specified period of time.
To remove the security freeze, you must send a written request to each of the three credit bureaus by mail and include proper identification (name, address, and social security number) and the PIN number or password provided to you when you placed the security freeze. The credit bureaus have three (3) business days after receiving your request to remove the security freeze.
If you have any questions about this matter you may contact this Web site, www.umass.edu/computerintrusion, or a special Telephone Help Line can be called at (413) 545-8376 from 8 a.m. to 5 p.m. Eastern Daylight Time. E-mail correspondence can be sent to computerintrusion@umass.edu.
University of Massachusetts, Amherst
