Boulder, CO – On July 21, 2021, BI Incorporated (“BI” or the “Company”) began the process of notifying individuals, as required by applicable state law, that a BI server was temporarily accessed by an unauthorized actor. The incident impacted a limited amount of the individuals’ personally identifiable information contained on a web server in connection with their participation in an electronic monitoring program operated by the Sheriff’s Office in Cook County, Illinois (“CCSO”).
What Happened
On May 18, 2021, BI was notified that an unauthorized individual accessed a BI web server. Within four hours, BI disabled all unauthorized user access and initiated response protocols. BI immediately launched an investigation, engaged the assistance of third-party cybersecurity and forensic specialists, and took steps to ensure the security of its systems.
What Information Was Involved
The impacted information included requests from participants in CCSO’s electronic monitoring program for movement, movement records, and non-sensitive information related to health care providers and facilities. At this time, the Company is not aware of any fraud or misuse of the information as a result of this incident. We have no evidence that Social Security numbers, sensitive financial information, or specific details of participants’ health or medical care were compromised as part of this incident.
What We are Doing
The privacy and security of information is one of BI’s highest priorities. As a result of this incident, BI reviewed existing security policies and implemented additional measures and enhanced security tools to further protect information in its systems. To help prevent a similar type of incident from occurring in the future, BI is assessing and implementing additional security protocols designed to protect its network, email environment, systems, and data.
What You Can Do
While BI is unaware of any actual or attempted misuse of any information as a result of this incident, we nonetheless encourage CCSO electronic monitoring participants to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to monitor your credit reports for suspicious activity. Please review the “Information About Identity Theft Protection” reference guide, below, which describes additional steps you may take to help protect yourself, including recommendations from the Federal Trade Commission regarding identity theft protection and details regarding placing a fraud alert or a security freeze on your credit file.
For More Information
We regret any inconvenience that this incident has caused and thank our stakeholders for their continued trust in BI. We have set up a hotline to provide further information: (833) 671-0406.
About BI Incorporated
Established in 1978, BI Incorporated is a subsidiary of The GEO Group. BI offers more than a dozen electronic monitoring systems, including participant and officer apps, GPS tracking, alcohol monitoring and traditional radio frequency monitoring to monitor schedules, curfews and behavior of offenders released to probation, parole, pretrial release and immigration supervision in the community. The company is an OEM and manufactures its products at U.S. facilities, employs more than 1,200 highly trained professionals, and produces more than 200,000 electronic monitoring devices annually. For more information on BI, see www.bi.com.
Information About Identity Theft Protection Guide
Contact information for the three nationwide credit reporting companies is as follows:
Equifax
Phone: 1-800-685-1111
P.O. Box 740256
Atlanta, Georgia 30348
www.equifax.com
Experian
Phone: 1-888-397-3742
P.O. Box 9554
Allen, Texas 75013
www.experian.com
TransUnion
Phone: 1-888-909-8872
P.O. Box 105281
Atlanta, GA 30348-5281
www.transunion.com
You can obtain additional information about fraud alerts and security freezes as well as further educate yourself regarding identity theft, fraud alerts, security freezes, and the steps you can take to protect yourself from identity theft by contacting the consumer reporting agencies listed above, the Federal Trade Commission listed below and/or the Illinois Attorney General.
Free Credit Report.
We remind you to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity. If you identify any unauthorized charges on your financial account statements, you should immediately report any such charges to your financial institution. You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. You can also order your annual free credit report by mailing a completed Annual Credit Report Request Form (available from the U.S. Federal Trade Commission’s (“FTC”) website at www.consumer.ftc.gov) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281.
Security Freeze.
Security freezes, also known as credit freezes, restrict access to your credit file, making it harder for identity thieves to open new accounts in your name. You can freeze and unfreeze your credit file for free. You also can get a free freeze for your children who are under 16. And if you are someone’s guardian, conservator or have a valid power of attorney, you can get a free freeze for that person, too.
How will these freezes work? Contact all three of the nationwide credit reporting agencies – Equifax, Experian, and TransUnion. If you request a freeze online or by phone, the agency must place the freeze within one business day. If you request a lift of the freeze, the agency must lift it within one hour. If you make your request by mail, the agency must place or lift the freeze within three business days after it gets your request. You also can lift the freeze temporarily without a fee.
The following information must be included when requesting a security freeze (note that if you are requesting a credit report for your spouse, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) current address and any previous addresses for the past five years; and (5) any applicable incident report or complaint with a law enforcement agency or the Registry of Motor Vehicles. The request must also include a copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. It is essential that each copy be legible, display your name and current mailing address, and the date of issue.
Fraud Alerts.
A fraud alert tells businesses that check your credit that they should check with you before opening a new account. An initial fraud alert stays on your credit report for one year. You may have an extended alert placed on your credit report if you have already been a victim of identity theft with the appropriate documentary proof. An extended fraud alert stays on your credit report for seven years. To place a fraud alert on your credit reports, contact one of the nationwide credit bureaus. A fraud alert is free. The credit bureau you contact must tell the other two, and all three will place an alert on their versions of your report.
Federal Trade Commission and State Attorneys General Offices.
If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your home state. You may also contact these agencies for information on how to prevent or avoid identity theft. You may contact the Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580, www.ftc.gov/bcp/edu/microsites/idtheft/, 1-877-IDTHEFT (438-4338).
Reporting of identity theft and obtaining a police report.
You have the right to obtain any police report filed in the United States in regard to this incident. If you are the victim of fraud or identity theft, you also have the right to file a police report.
