Notice of a Data Incident
The Law Offices of Joseph L. Bornstein (“Bornstein”) recently learned of a security incident that involved the personal information of a limited number of individuals when an unauthorized third party gained access to a Bornstein employee email account. While Bornstein is not aware any fraudulent activity or misuse of information as a result of the incident, it is posting this Notice to alert potentially affected individuals about the steps that have been taken to address the incident and to provide them with guidance on what they can do to protect themselves.
Upon learning of the incident, Bornstein promptly secured the email account to prevent further access and engaged a leading forensic security firm to investigate the incident. The investigation identified no indication that the unauthorized third party actually viewed or acquired any personal information while accessing the account. Nevertheless, as part of the investigation, an intensive search for any personal information in the involved email account that the unauthorized third party could have viewed was undertaken. On January 21, 2021, Bornstein determined that the email account contained some individuals’ personal information. The type of information at issue varied for each individual, but may have included name, date of birth, Social Security number, driver’s license number/state ID number, passport number, tax ID number, credit/debit card number with expiration date and CVV, financial account number with PIN/security code, username and password, and/or limited medical information and health insurance information.
On April 6, 2021, Bornstein sent written notification to the individuals whose personal information was contained in the email account for whom it has contact information and arranged for complimentary identity theft protection services for those individuals whose Social Security numbers, driver’s license numbers/state ID numbers, and/or passport numbers were involved in the incident.
Individuals should refer to the notice they will receive in the mail regarding steps they can take to protect themselves. Again, Bornstein is not aware any fraudulent activity or misuse of information as a result of the incident, but as a precautionary measure, individuals should remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing their account statements, monitoring their credit reports closely, and notifying their financial institutions if unusual activity is detected. They should also promptly report any fraudulent activity or suspected identity theft to proper law enforcement authorities, including the police and their state’s attorney general.
Individuals may also wish to review the tips provided by the Federal Trade Commission (“FTC”) on fraud alerts, security/credit freezes and steps that they can take to avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-ID-THEFT (1-877-438-4338). Individuals may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
Bornstein takes the security of individuals’ personal information very seriously and apologizes for any inconvenience or concern this incident might cause. Additional information is available via a confidential, toll-free inquiry line at 1-800-535-5934 from 8:00 a.m. to 5:00 p.m. ET, Monday through Friday.