SIRIUS XM HOLDINGS INC.

Sirius XM Radio Inc. notified Montana residents of a data security incident occurring on October 31, 2016, involving unauthorized access to Online Account Center credentials. Exposed data included names, addresses, emails, radio nicknames, and payment methods (excluding card/bank data). The company engaged EZShield for one year of ID protection services and required password resets.

Sirius XM Radio Inc. reported a resolved security breach affecting 352 individuals, including 2 New Hampshire residents. Discovered on Oct 31, 2016, unauthorized users accessed online account credentials, names, addresses, and payment methods. No credit card numbers were accessed. Remediation included mandatory password changes and 12 months of credit monitoring.

Sirius XM Radio Inc. notified the NH AG of a security breach involving its contractor, Stream International Global Services Philippines, Inc. On March 19, 2012, three call center employees were detected recording unencrypted credit card information of customers in violation of protocol. 234 individuals were affected, including 1 NH resident. Sirius suspended the employees, investigated the site, and provided 24 months of credit monitoring.