ACTIVEOutdoors

• •Launched an extensive investigation in coordination with the impacted states
• •Released updates to its applications to address the potential threat
• •Engaged a top-tier cybersecurity firm to conduct an independent comprehensive review
• •Providing notice to all affected individuals, including New Hampshire residents
• •Providing 24 months of identity repair and restoration services through AllClear ID at no cost to any affected person
• •Providing 24 months of AllClear ID credit monitoring services in addition to the identity repair and restoration services
• •Introduced additional security measures into the Affected Applications to prevent this type of unauthorized access to the system in the future
• •Introduced further countermeasures into the production environment to both prevent access of this nature as well as detect other forms of unauthorized access to these systems
• •Providing written notice (for affected consumers for which AO has available mailing address)
• •Providing electronic notice (for those affected consumers for which AO has an available email address but no mailing address)
• •Providing statewide media notification via national wire service press releases
• •Providing a publicly available website for inquiries at https://activeoutdoors.allclearid.com along with a dedicated toll-free call center
• •Providing notifications to the three major consumer reporting agencies on September 19, 2016

• •Introduced additional security measures into the Affected Applications to prevent this type of unauthorized access to the system in the future
• •Introduced further countermeasures into the production environment to both prevent access of this nature as well as detect other forms of unauthorized access to these systems

DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).