DOOSAN FUEL CELL AMERICA, INC.

• •IT vendor immediately took steps to secure file servers
• •Hired a third-party forensic investigator
• •Conducted an investigation in to the nature and scope of the suspicious activity
• •DFCA hired its own forensic investigator to analyze the personal information that may have been impacted
• •Worked with its IT vendor to implement global password resets
• •Deploy additional security for privileged accounts
• •Take steps to remove the attackers from all systems
• •Took steps to improve security around employee administrator accounts
• •Worked with its IT vendor to implement multi-factor authentication for employee email accounts
• •Worked with its IT vendor to install new security applications to detect and prevent suspicious activities on its networks
• •Worked with its IT vendor to notify law enforcement of this incident
• •Retained a vendor to assist with locating current contact information for the impacted individuals

• •Worked with its IT vendor to implement global password resets
• •Deploy additional security for privileged accounts
• •Take steps to remove the attackers from all systems
• •Took steps to improve security around employee administrator accounts
• •Worked with its IT vendor to implement multi-factor authentication for employee email accounts
• •Worked with its IT vendor to install new security applications to detect and prevent suspicious activities on its networks
• •Review our existing policies and procedures
• •Implement additional safeguards
• •Provide additional training to our employees on data privacy and security
• •Offering you complimentary access to two years of credit and identity monitoring, fraud consultation, and identity theft restoration services through our service provider Kroll

DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).