Jewish Child Care Association of New York

Notice of Privacy Incident

Jewish Child Care Association of New York – Notice of Privacy Incident Jewish Child Care Association of New York (“JCCA”) is announcing a recent event that may impact the security of information related to certain individuals. Although JCCA presently has no evidence that any such information has been used to commit identity theft or fraud, JCCA is providing information about the incident, steps taken since discovering the incident, and resources available to individuals to help protect their information from possible misuse, should they feel it is appropriate to do so.

What Happened? On August 1, 2024, JCCA became aware of suspicious activity in its computer network and immediately launched an investigation to determine the nature and scope of the activity. The investigation determined that an unauthorized individual gained access to certain JCCA systems between July 21, 2024, and August 1, 2024, and viewed or copied certain information stored on those systems. JCCA’s investigation to determine the information that may have been present in the potentially affected files is ongoing. JCCA will notify affected individuals identified through the review process and for whom it has address information via letter with additional information.

What Information Was Affected? The investigation into the affected information is ongoing. The information potentially affected may include a combination of certain individuals’ names, contact information, Social Security numbers, patient identification numbers, medical record numbers, medical information, treatment information, diagnosis information, health insurance information, driver’s license/stated identification numbers, financial account information, and dates of birth.

What JCCA is Doing. JCCA takes this incident and the security of information in their care very seriously. Upon becoming aware of this incident, JCCA promptly commenced an investigation to confirm the nature and scope of this incident. This investigation and response included confirming the security of our systems, reviewing the contents of relevant data for sensitive information, and investigating to determine the information that may be involved. JCCA also notified federal law enforcement. As part of JCCA’s ongoing commitment to the privacy of information in their care, JCCA is reviewing its policies, procedures and processes to reduce the likelihood of a similar future event. JCCA will also notify applicable regulatory authorities where necessary.

For More Information. If you believe you are potentially impacted by this incident or have additional questions, you may contact JCCA by email at legalnotices@jccany.org or by mail at JCCA, ATTN General Counsel, 57 Willoughby Street, Brooklyn, New York11201.

What You Can Do. JCCA encourages all potentially impacted individuals to remain vigilant by reviewing account statements, monitoring free credit reports and Explanation of Benefits for suspicious activity, and to detect errors. Under U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax, Experian, and TransUnion. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also directly contact the three major credit reporting bureaus listed below to request a free copy of your credit report.

Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a one-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any one of the three major credit reporting bureaus listed below.

As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report. To request a security freeze, you will need to provide the following information:

1. 1. Full name (including middle initial as well as Jr., Sr., II, III, etc.);
   2. Social Security number;
   3. Date of birth;
   4. Addresses for the prior two to five years;
   5. Proof of current address, such as a current utility bill or telephone bill;
   6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, etc.); and
   7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if you are a victim of identity theft.

    

4. Should you wish to place a fraud alert or credit freeze, please contact the three major credit reporting bureaus listed below: