Notice of Data Security Incident
Privileged & Confidential
Douglass Financial Services – Substitute Notice
March 8, 2022
NOTICE OF DATA SECURITY INCIDENT
Douglass Financial Services (“Douglass Financial”) recently learned about a data security incident that may have impacted your personal information. Specifically, the incident in question may have resulted in the disclosure of your personal information including, but not limited to name, address, date of birth, driver’s license number, Social Security number, medical information, and financial account information. Douglass Financial is an independently owned financial consulting firm serving clients in Central Illinois. At Douglass Financial, we respect the privacy and security of all information within our control, and sincerely apologize for any concern this may cause you.
What happened?
On September 29, 2021, Douglass Financial learned of suspicious activity associated with one of its corporate email accounts. As soon as Douglass Financial learned of the incident, it began an internal investigation and hired a third-party vendor to conduct an in-depth review of the email account to determine what personal information may have been located in the account, and to extract contact information of potentially affected individuals. This review was completed on January 28, 2022, at which point Douglass Financial identified that the personal information of individuals may have been located in the corporate email account at issue. While Douglass Financial has no evidence that any personal information has been misused it is providing this notice out of an abundance of caution.
What information was involved?
The categories of personal information that may have been impacted include first and last names, addresses, date of birth, driver’s license number, Social Security number, financial information, and medical information.
What are we doing?
To help reduce the risk of fraud or identity theft, we are offering complimentary credit monitoring and identity monitoring services for one year, at no charge.
Additionally, in response to this incident, Douglass Financial has taken steps to increase the security of its systems including, resetting passwords, enabling multi-factor authentication across all Douglass Financial corporate email accounts.
What can you do?
It is always a good idea to carefully monitor your bank account and other financial statements, and immediately contact your financial institution if you identify any suspicious activity. All adults whose Social Security numbers may have been involved in this incident are being offered complimentary identity protection services through Kroll for 12 months. We encourage you to contact Kroll with any questions and, if your information was present in the impacted dataset, take full advantage of the Kroll service offering. To determine whether you were affected by this incident, please call 1-855-541-3553, Monday through Friday from 8 am – 5:30 pm Central Time.
For more information:
If you have any questions or concerns, please call 1-855-541-3553, Monday through Friday from 8 am – 5:30pm Central Time. Your trust is our top priority, and we deeply regret any inconvenience or concern that this matter may cause you. Individuals can also contact the Federal Trade Commission at 600 Pennsylvania Avenue NW, Washington, D.C. 20580, 1-877-ID-THEFT (1-877-438-4338); TTY: 1-866-653-4261 or visit www.ftc.gov/idtheft/ for more information on protecting their identity.