Out of an abundance of caution, the Town of Christiansburg is offering free credit monitoring to certain individuals after a data security incident earlier this year.
On October 26, 2018, computer forensics revealed that three Town of Christiansburg employee email accounts were compromised following a phishing email sent to Town staff in May, June and September. The email accounts impacted contained some personally identifiable information of members of the public, but there is no evidence to date that any of that information has been misused. Upon learning that the accounts were compromised, the log in information for all employee accounts was changed and has been constantly monitored by computer forensics. The Town also contacted law enforcement to report the incident.
“To reiterate, based on the Town’s investigation, we are not aware of any activity that has impacted individuals as a result of this incident,” Town Manager Randy Wingfield said. “However, if scammers have plans to misuse that information, we wanted to act fast and be transparent throughout this process.”
Was I affected?
Affected individuals will receive a letter to inform them that their information was contained in one of the accounts. Those 909 individuals will be offered complimentary credit monitoring at the Town’s expense. The credit monitoring helps detect possible misuse of personal information and provides those individuals with identity protection support focused on immediate identification and resolution of identity theft.
The Town’s financial and record management systems were not attacked or affected.
If you do not receive a letter about this incident, you were not affected; however, if you would like to confirm that you were not affected, you can call (877) 769-5558 and provide your name and date of birth.
What is the Town doing differently moving forward?
The Town of Christiansburg has taken every step necessary to address the incident and is committed to fully protecting all of the information the public has entrusted to us. The Town worked with data privacy experts and other professionals and has already taken steps to fix the issue and strengthen the Town’s systems. The following protective measures have been taken:
- Requiring additional security and data protection training for all employees
- Implementing additional technological security measures
- Updating password protocols
- Limiting user’s access to information possessed and maintained by the Town
- Conducting regular phishing testing of employees
We value and respect the privacy of our customers and constituents. We deeply regret that this incident occurred, and we apologize for any inconvenience or concern it may cause you. The steps we have already taken will help ensure this does not happen again.
How do I sign up for credit monitoring?
If you are an affected individual, the letter you received has instructions on how to sign up for free credit monitoring. If you did not receive a letter, you were not affected by this incident.
What information was believed to be compromised?
It is important to note that there is no evidence to suggest that any personally identifiable information has been misused. Additionally, there is no indication that any associated information is being bought or sold on the Internet.
The information potentially exposed includes some combination of social security number, medical information, financial account information, driver’s license numbers, credit card information, username and password combinations and passport information.
Please contact (877) 769-5558 to speak with an individual in more detail.