Civil Air Patrol

• •Attempted to recall the message
• •Instructed all recipients to delete the e-mail message
• •Initiated an investigation to determine the full scope and impact of the incident
• •Providing access to credit monitoring services for individuals whose personal information was potentially affected by this event, at no cost to these individuals
• •Providing impacted individuals with guidance on how to better protect against identity theft and fraud
• •Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
• •Providing information on protecting against tax fraud
• •Providing the contact details for the national consumer reporting agencies
• •Providing information on how to obtain a free credit report
• •Providing a reminder to remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports
• •Providing encouragement to contact the Federal Trade Commission, their state Attorney General, and law enforcement to report attempted or actual identity theft and fraud
• •Providing written notice of this event to relevant state regulators, as necessary
• •Providing written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion

• •Implementing additional safeguards and training to its employees
• •Reviewing and enhancing existing policies and procedures related to data privacy to reduce the likelihood of a similar future incident

DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).