|
UC Berkeley
Data Security Incident
Q: I think my name
might be on one of those files. What should I do?
A. You will be receiving a letter from UC
Berkeley to confirm if your name was within one of the exposed
spreadsheets. If you think
your name may have been among those files, call the toll-free
campus hotline number 1-800-372-5110 for confirmation.
Back to top
Q.
If my information was among the files
potentially exposed, does this mean that I'm a victim of identity theft?
A. No. The fact that
someone may have had access to your information doesn't mean you
are a victim of identity theft or that they intend to use the
information to commit fraud. We wanted to let you know about the
incident so that you can take appropriate steps to protect
yourself, if you are concerned. The best way to protect yourself
is to place a fraud alert on your credit files and review your
credit reports.
Back to top
Q.
How will I know if any of my personal
information was used by someone else?
A. The best way to find out
is to obtain your credit reports from the three major credit
bureaus: Equifax, Experian and Trans Union. If you notice
accounts on your credit report that you did not open or
applications for credit ("inquiries") that you did not
make, these could be indications that someone else is using your
personal information, without your permission.
Back to top
Q.
Do I have to pay for the credit
report?
A. No. You can place
a fraud alert on your credit report free of charge. Contact the
fraud department at any one of the three major credit
bureaus:
The fraud alert requests creditors to contact you
before opening any new accounts or making any
changes to your existing accounts. As soon as the
credit bureau confirms your fraud alert, the other
two credit bureaus will be automatically notified to
place fraud alerts, and all three credit reports
will be sent to you free of charge. For more detailed
information regarding placing a fraud alert, see on
the ID Alert home
page (http://idalert.berkeley.edu/).
Back to top
Q.
What is a fraud alert?
A. A fraud alert is a message
that credit issuers receive when someone applies for new credit
in your name. The message tells creditors that there is possible
fraud associated with the account and gives them a phone number
to call (yours) before issuing new credit. When you call the
credit bureau fraud line, you will be asked for identifying
information and will be given the opportunity to enter a phone
number for creditors to call.
Back to top
Q.
What should I look for on my credit
report?
A. Look for any
accounts that you don't recognize, especially accounts opened
recently. Look at the inquiries or requests section for names of
creditors from whom you haven't requested credit.
Note that some kinds of inquiries, labeled something like
"promotional inquiries," are for unsolicited offers of
credit, mostly from companies with whom you do business. Don't
be concerned about those inquiries as a sign of fraud. (You are
automatically removed from lists to receive unsolicited
pre-approved credit offers when you put a fraud alert on your
account. You can also stop those offers by calling
888-5OPTOUT.)
Look in the personal information section for
addresses where you've never lived. Any of these
things might be indications of fraud. Also be on the
alert for other possible signs of identity theft,
such as calls from creditors or debt collectors
about bills that you don't recognize, or unusual
charges on your credit card bills.
If you find items you don't understand on your
report, call the credit bureau at the number given
on the report. Credit bureau staff will review your
report with you. If the information can't be
explained, then you will need to call the creditors
involved and report the crime to your local police
or sheriff's office. For more information on what to
do in this case, visit the Office of Privacy
Protection's website at www.privacy.ca.gov,
and go to the Identity Theft page.
Back to top
Q.
What happens if I find out that I have
been a victim of identify theft?
A. You should immediately notify your local
law enforcement agency, contact any creditors involved and
notify the credit bureaus. For more information on what to do,
see the Identity Theft Victim Checklist on the Identity Theft
page of the California Office of Privacy Protection's website at
www.privacy.ca.gov.
Back to top
Q.
I called the credit bureau
fraud line and they asked for my Social Security
number. Is it okay to give it?
A. The credit bureaus ask for
your Social Security number and other information in order to
identify you and avoid sending your credit report to the wrong
person. If, however, you are contacted by individuals claiming
to represent the University regarding this or some other
security incident, and who then proceed to ask for personal
information, we recommend caution. Please be aware that UC
Berkeley will only contact you with information regarding steps
you should take to prevent possible fraud or identity theft; or
if you ask us, by email or telephone, for information. We will
not ask for your full Social Security number. We will not ask
for credit card or bank information. We recommend that you do
not release personal information in response to any contacts of
this nature that you have not initiated.
Back to top
Q.
Do I have to call all three credit
bureaus?
A. No. If you
call just one of the bureaus, they will notify the other two. A
fraud alert will be placed on your file with all three and you
will receive a confirming letter from all three.
Back to top
Q.
Why can't I talk to someone at the
credit bureaus?
A. You must first order your
credit reports. When you receive your reports, each one will
have a phone number you can call to speak with someone in the
bureau's fraud unit. If you see anything on any of your reports
that looks unusual or that you
don't understand, call the number on the report.
Back to top
Q.
How long does it take to receive my
credit report?
A. It
could take about 20 days from the day you call the credit
bureaus. It takes about 5 to 10 days from the time you call the
credit bureaus to get your fraud alert confirmation letter with
instructions on ordering your credit report. You should receive
your reports in another 5 to 10 days from the time you order
them.
Back to top
Q.
How long does a fraud alert last?
A. An initial fraud alert
lasts 90 days. You can remove an alert by calling the credit
bureaus at the phone number given on your credit report. If you
want to reinstate the alert, you can do so. If you are the
victim of identity theft, you can place an Extended Fraud Victim
Alert on your report by submitting a copy of a valid identity
theft report that you have filed with a federal, state or local
law enforcement agency. An Extended Alert will remain on your
report for seven years.
Back to top
Q.
Will a fraud alert stop me from using my
credit cards?
A. No. A
fraud alert will not stop you from using your existing credit
cards or other accounts. It may slow down your ability to get
new credit. Its purpose is to help protect you against an
identity thief trying to open credit accounts in your name.
Credit issuers get a special message alerting them to the
possibility of fraud. Creditors know that they should re-verify
the identity of the person applying for credit.
Back to top
Q.
Can I still apply for credit after I
place a fraud alert on my credit report?
A. You should still be able to
get credit. While a fraud alert may slow down the application
process, you can prove your identity to a prospective creditor
by providing identifying information.
Back to top
Q.
Should I contact the Social Security
Administration and change my Social Security number?
A. The Social Security
Administration very rarely changes a person's SSN. And the mere
possibility of fraudulent use of your SSN would probably not be
viewed as a justification. There are drawbacks to doing so. The
absence of any history under the new SSN would make it difficult
to get credit, continue college, rent an apartment, open a bank
account, get health insurance, etc. In most cases, getting a new
SSN would not be a good idea.
Back to top
Q.
Should I close my bank account?
A. No; we did not have any
bank account numbers on file. (As a general privacy protection
measure, you should limit the use of your SSN where it's not
required. For example, if your bank account number or PIN is
your SSN, you should ask the bank to give you a different
number. Do NOT use the last four digits of your SSN, your
mother's maiden name, or your birth date as a password for
financial transactions.)
Back to top
Q.
Should I close my credit card or other
accounts?
A. No; no
account number information was among the items of personal
information compromised in the breach. (As a general privacy
protection measure, you should always look over your credit card
bills carefully to see if there are any purchases you didn't
make. If so, contact the card company immediately.)
Back to top
Q.
Will UC Berkeley contact me to ask for private
information because of this event?
A. In similar cases at
other institutions, people have reportedly been
contacted by individuals claiming to represent the
University and who then proceed to ask for personal
information, including social security numbers and/or
credit card information. Please be aware that UC Berkeley will only
contact you with information regarding steps you should take to
prevent possible fraud or identity theft; or if you ask us, by
email or telephone, for information. We will not ask for your
full Social Security number. We will not ask for credit card or
bank information. We recommend that you do not release personal
information in response to any contacts of this nature that you
have not initiated.
Back to top
Q.
Why did you have my personal
information?
A. This information, including
social security numbers, may have been provided to the Cal 1 Card staff
to assist in the processing of a fee waivers, student billing, or
because they did not remember or did not have an Employee or Student ID
number.
Back to top
Back to ID Alert home page
|