TO THE UNIVERSITY OF CALIFORNIA COMMUNITY
We are writing to provide you additional information about a data security incident affecting the UC community and what you should do to protect your personal information.
As was announced on March 31st, UC is one of several institutions targeted by a nationwide cyber attack on Accellion’s File Transfer Appliance (FTA), a vendor service used for transferring sensitive information. This attack has affected approximately 300 organizations, including universities, government institutions and private companies. In this incident the perpetrators gained access to files and confidential personal information by exploiting a vulnerability in Accellion’s program. At this time, we believe the stolen information includes but is not limited to names, birth dates, Social Security numbers and bank account information. The attackers are threatening to publish, or have published, stolen information on the dark web in an attempt to extort organizations and individuals.
We are working with local and federal law enforcement and third-party vendors to investigate this incident, to assess the information that has been compromised, to enforce the law, and to limit the release of stolen information.
We are alerting you now so you are able to take protective actions as we work to address the situation.
What you should do to protect your personal and financial information:
- Sign up for free credit monitoring and identity theft protection: To help you protect your identity, we are offering the entire UC community complimentary credit monitoring and identity theft protection for one year through Experian IdentityWorksSM. This service includes:
- Credit monitoring: Actively monitors your Experian file for indicators of fraud.
- Internet surveillance: Technology searches the web, chat rooms & bulletin boards 24/7 to identify trading or selling of your personal information on the dark web.
- Identity restoration: Identity restoration specialists are immediately available to help you address credit and non-credit related fraud.
- Experian IdentityWorks ExtendCARETM: You receive the same high-level of identity restoration support even after your Experian IdentityWorks membership has expired.
- $1 Million Identity Theft Insurance: Provides coverage for certain costs and unauthorized electronic fund transfers.
- Lost wallet: Provides assistance with canceling/replacing lost or stolen credit, debit, and medical cards.
- Child monitoring: For 10 children up to 18 years old, internet surveillance and monitoring to determine whether enrolled minors in your household have an Experian credit report are available. Also included are identity restoration and up to $1M Identity Theft Insurance.
