Data Breach Resources

Rooted in trust, committed to protection

Did your church experience a data breach?

data breach (n.): Any security incident in which unauthorized parties access sensitive or confidential information, including personal data (member information, Social Security numbers, background checks, or pastoral counseling records) and organizational data (financial records, contribution data, payroll information, or staff/volunteer files).

In this challenging circumstance, often the best contact is your insurance provider. They know your situation and they typically have specific resources and guidance for this exact scenario. Still, here’s some general info:

 

Wisconsin, Minnesota, and Iowa all require organizations to notify potentially affected individuals in the event of a data breach.

 

Treat anyone whose contact info was accessed as potentially affected. Sensitive identifiers like SSNs and background checks are most crucial, but anyone whose address, email, or phone number was obtained may still be a target for scam attempts.

 

This just means they need to be notified of a potential data breach. This is a great guide and template for the notification, including details on what they can do to protect themselves going forward. Some key points:

 

  • Everyone is entitled to at least one free credit report every 12 months from each of the three major credit bureaus. Currently, the bureaus are also allowing people to check their credit reports online for free once a week through AnnualCreditReport.com


  • For those not able to use the website, the free annual credit report is also available by calling 877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348


  • Many banks offer free weekly credit updates including estimated credit score and email notifications of any new accounts opened. It is highly recommended to sign up for these if your bank offers them, even for those not in a data breach!


  • It's also highly recommended for anyone potentially affected to place a fraud alert on their credit file. This instructs lenders to take extra steps to verify your identity before processing credit card or loan applications. It does not restrict your ability to use credit and can be done quickly, even if you're not sure whether your information was exposed or misused.


  • To place a fraud alert, you only need to contact one of the three credit bureaus (they will notify the other two). You can place it online or by calling 888-397-3742.


  • Folks who are particularly concerned about identity theft or fraud (like those who have already been affected by prior scams or breaches) can place a credit freeze on file. This will prevent new credit from being opened in your name until you contact the credit bureaus and temporarily (or permanently) lift the freeze. To place a credit freeze, you'll need to contact each credit bureau online, by phone, or mail (details here).