On November 29, 2020, Citywide learned that an unauthorized third party gained remote access to our computer network for a limited period of time and acquired certain personally identifiable information, including information associated with Citywide borrowers and current and former employees.
Depending on the individual, the types of information affected may have included the following: name, address, phone number, date of birth, Social Security number, passport number, driver’s license, credit card and bank or financial account information, or medical or insurance information. Additionally, information relating to benefits obtained under our self-funded health plan, such as demographic information, clinical diagnoses, and financial information affecting current and former Citywide employees and certain of their applicable covered dependents, may have also been affected. Our security team took immediate action to contain and eliminate the threat, and promptly began investigating the incident. With the assistance of external cybersecurity experts, we have since taken a number of steps to enhance our information security.
We have engaged Kroll to provide two years of identity monitoring services to all affected customers and all of our current and former employees at no cost to you. Your identity monitoring services include Credit Monitoring, Fraud Consultation and Identity Theft Restoration services. Instructions on how to activate these services will be mailed to all affected borrowers and all current and former employees. If you did not receive a letter containing instructions, please contact Kroll at the number below to determine whether you are eligible for these services. Upon request, these services may also be provided to eligible spouses and dependents covered by the Citywide Health Plan.
We strongly encourage affected borrowers, as well as current and former employees, to contact Kroll, remain vigilant, and carefully review your accounts for any suspicious activity. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. You should also promptly report any fraudulent activity or any suspected incidence of identity theft to law enforcement authorities.
We take our responsibility to protect your information seriously, and we are very sorry for any inconvenience that this has caused you. If you have any questions regarding this incident or the services available to you, additional assistance is available by calling 1-855-763-0486 Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time.
Teresa Whitehead, CEO