Members Mortgage Services, LLC (MMS) recently learned that an unauthorized third party gained access to one MMS employee online email account.
Upon learning of the incident, MMS promptly secured the email account to prevent further access. MMS also retained a leading forensic security firm to investigate and confirm the security of its email and computer systems. In addition, MMS has taken steps to reduce the risk of this type of incident occurring in the future, including enhancing its technical security measures. Since an unknown individual had access to the account, MMS searched the accounts for any personal information contained therein. MMS recently determined the impacted account contained certain personal information.
On September 29, 2021, MMS sent written notification to all potentially impacted individuals for whom it has contact information. For the individuals with Social Security numbers involved, MMS has provided a complimentary membership for credit monitoring and identity protection services.
IF I RECEIVED A LETTER, WHAT SHOULD I DO?
As a precautionary measure, impacted individuals should remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing their account statements, monitoring their credit reports closely, and notifying their financial institutions if unusual activity is detected. They should also promptly report any fraudulent activity or suspected identity theft to proper law enforcement authorities, including the police and their state’s attorney general.
Affected individuals may also wish to review the tips provided by the Federal Trade Commission (“FTC”) on fraud alerts, security/credit freezes and steps that they can take to avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-ID-THEFT (1-877-438-4338). Affected individuals may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
Contact information for the three national credit reporting agencies is as follows:
MMS takes the security of individual’s personal information very seriously. Additional information is available via a confidential, toll-free inquiry line 1.888.902.1177 from 8:00am to 5:00pm Central Time.
I DIDN’T RECEIVE A LETTER BUT I DO BUSINESS WITH MMS, WAS MY INFORMATION COMPROMISED?
Based on MMS’s investigation, the incident only impacted certain individuals. If you did not receive a letter in the mail, you were likely not impacted by this incident. If you would like to confirm, you may call the inquiry line 1.888.902.1177 from 8:00am to 5:00pm Central Time.
HAS INFORMATION FROM THIS INCIDENT BEEN USED FRAUDULENTLY?
At this time, MMS has no indication of fraud or misuse of personal information as a result of this incident.
ARE THE REST OF MMS’S COMPUTER SYSTEMS SECURE?
The compromise was solely restricted to one employee online email account. The incident had no impact on MMS’s computer systems.
WHAT ARE SOME GENERAL STEPS I CAN TAKE TO PROTECT MYSELF FROM FRAUDULENT ACTIVITY?
MMS encourages individuals to remain vigilant against incidents of identity theft and fraud, to review account statements and explanation of benefits forms, and to monitor free credit reports for suspicious activity and to detect errors.
If you ever suspect that you are the victim of identity theft or fraud, you have the right to file a report with police or law enforcement. In addition, you may contact the FTC or your state’s attorney general to learn more about the steps you can take to protect yourself against identity theft.
It is always a good idea to be alert for “phishing” emails by someone who acts like they know you or are a company that you may do business with and requests sensitive information over email, such as passwords, Social Security numbers, or bank account information. We do not ask for this type of information over email.
If you believe you are a victim of fraud or identity theft, you can contact your local law enforcement agency, your state’s attorney general, or the Federal Trade Commission (FTC). Please know that contacting us will not expedite any remediation of suspicious activity.
Information on Obtaining a Free Credit Report
U.S. residents are entitled under U.S. law to one free credit report annually from each of the three major credit bureaus. To order your free credit reports, visit www.annualcreditreport.com or call toll-free from the U.S. at 1.877.322.8228.
Information on Implementing a Fraud Alert or Security Freeze
You may contact any one of the three major credit bureaus at the addresses above to place a fraud alert on your credit report. A fraud alert indicates to anyone requesting your credit file that you suspect you are a possible victim of fraud. A fraud alert does not affect your ability to get a loan or credit. Instead, it alerts a business that your personal information might have been compromised and requires that business to verify your identity before issuing you credit. Although this may cause some short delay if you are the one applying for the credit, it might protect against someone else obtaining credit in your name.
A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with or prevent the timely approval of any requests you make for new loans, credit, mortgages, employment, housing or other services.
A credit reporting agency may not charge you to place, temporarily lift, or permanently remove a security freeze.
To request a security freeze, you will need to provide the following information:
- Your full name (including middle initial as well as Jr., Sr., II, III, etc.)
- Social Security number;
- Date of birth;
- If you have moved in the past five (5) years, the addresses where you have lived over those prior five (5) years;
- Proof of current address such as a current utility bill or telephone bill; and
- A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification, etc.).
FTC Contact Information
You may also contact the FTC for further information on fraud alerts, security freezes, and how to protect yourself from identity theft. The FTC can be contacted at 400 7th St. SW, Washington, DC 20024; by telephone at 1.877.382.4357; or at www.consumer.gov/idtheft.
Your state attorney general may also have advice on preventing identity theft, and you should report instances of known or suspected identity theft to law enforcement, your state attorney general, or the FTC.