Phase3 Lost Laptop
A laptop that belonged to an employee of SunGard’s Phase3 business unit was lost. The employee who lost the laptop was working on a data conversion project for the Equity Clearing Division of Newedge USA, LLC ("Newedge"), formerly known as Preferred Trade and Fimat Preferred, a customer of the Phase3 securities processing system. The laptop was password protected, but the data on the laptop was not encrypted.
Phase3 retained a leading consulting and computer forensics firm, Stroz Friedberg LLC, to assist with a comprehensive forensic analysis of the back-up of the data contained on the laptop. The investigation found that the laptop contained personally identifiable information relating to certain individuals. Phase3 is now notifying the affected individuals.
While we are not aware of any personally identifiable information being misused as a result of this incident, we are treating this incident as a serious matter. Phase3 is offering two years of credit monitoring to affected individuals, help desk support, and this website containing information on the incident and the steps affected individuals can take to help protect against the potential misuse of personally identifiable information.
We are very sorry for the trouble that this incident has caused Newedge and its clients and have apologized unreservedly.
What happened?
When did Newedge learn of this incident?
Has my personal information been stolen?
Why was my information on this laptop?
Do you know where the laptop is now?
What steps did Phase3 take in response to the incident?
Has anybody reported identity theft?
What steps are being taken to prevent another similar incident?
If I am affected, what should I do?
If I am affected, how do I set up credit monitoring?
Once I have my credit monitoring activation code, what do I do?
What company has been selected to provide credit monitoring?
Is there a deadline to register for the package of credit monitoring services?
I am having trouble with the Experian website, what do I do?
How do I request a copy of my credit report?
What if I find a problem in my credit report?
What is a fraud alert?
How do I place a fraud alert on my credit file?
Can I extend a fraud alert placed on my credit file?
What is a security freeze and how do I place one on my credit file?
Will someone call me to confirm that my information has been stolen?
What happened?
On May 11, 2008, an employee of SunGard’s Phase3 business unit left a bag containing his laptop in a taxi at the Ft. Lauderdale airport. The laptop was enabled with a password, but the contents of the laptop were not encrypted. A forensic review has revealed the laptop may have contained an electronic file with names and Social Security Numbers, and potentially other information including date of birth, home address and telephone number, net worth and annual income.
When did Newedge learn of this incident?
Phase3 notified Newedge of the incident on June 6, 2008.
Has my personal information been stolen?
We are not aware of any misuse of personally identifiable information. The personally indentifiable information belonged to certain equities customers of Newedge (formally Fimat Preferred and PreferredTrade) who are being contacted by us directly and will be provided with a free credit monitoring product through Consumerinfo.com, Inc., an Experian® company. We encourage anyone concerned with taking steps to protect his or her identity to visit htttp://www.idtheftcenter.org.
Why was my information on this laptop?
Phase3 processes trade data for retail/institutional brokerage firms. Because the employee was performing data conversions for Newedge, his laptop contained Newedge client account information .
Do you know where the laptop is now?
No, unfortunately the investigation has not yet resulted in recovery of the laptop.
What steps did Phase3 take in response to the incident?
Based on the complex nature of the data, Phase3, Newedge and outside forensic experts conducted a great deal of investigative and reconstructive work to accurately identify and notify affected individuals.
Has anybody reported identity theft?
We have received no reports of any misuse of personally identifiable information related to this laptop loss and are continuing to monitor the situation.
What steps are being taken to prevent another similar incident?
SunGard’s CEO has ordered a top-to-bottom review of information security policies and procedures encompassing all business units and corporate departments. SunGard is working proactively to assure that personally identifiable information, whether belonging to our customers or our employees, is protected from theft and accidental or unauthorized disclosure. SunGard has continued to take steps necessary to minimize the likelihood of such an incident occurring again, including limiting the amount of personally identifiable information on devices, enhancing the use of encryption or similarly secure technologies on devices containing personally identifiable information and retaining experts to review and improve information security policies. Our desired goal is to develop and implement the best security measures in the industry.
If I am affected, what should I do?
Individuals affected by this incident are being provided with credit monitoring services through Experian. Please follow the instructions in the communications you have received to set up credit monitoring.
We encourage anyone concerned with protection of their identity to request a free credit report from one of the three major credit reporting agencies through www.annualcreditreport.com and review it for any irregularities or accounts that you don’t recognize. Since identity theft is a fast growing crime in the U.S., this is a good practice to do on a regular basis anyway. For instructions, please review the “Protecting Your Credit” section on this site.
If I am affected, how do I set up credit monitoring?
If the notification letter you received contains detailed instructions with a credit monitoring activation code, please follow those instructions.
Once I have my credit monitoring activation code, what do I do?
Please visit http://partner.consumerinfo.com/phase3laptop and enter the nine character alpha numeric credit monitoring activation code you received. You will be instructed on how to initiate your online membership. Because this is a secure site, please note that there is no www in this URL.
What company has been selected to provide credit monitoring?
ConsumerInfo.com, Inc., an Experian® company has been selected to provide affected individuals with a suite of credit monitoring services, free of charge. This credit monitoring product known as Triple AlertSM will identify and notify affected individuals who register for this product of key changes in their three national credit reports that may indicate fraudulent activity.
Complimentary 2 year membership for affected individuals includes:
- Monitoring of all three credit files with Experian, Equifax® and TransUnion® – everyday
- Email alerts of key changes which could help you to identify possible fraudulent activity
- Monthly “No Hit” alerts, if applicable
- Access to a dedicated team of fraud resolution representatives for victims of identity theft
- $25,000 identity theft insurance provided by Virginia Surety Company, Inc. with no deductible*
*Due to New York state law restrictions, identity theft insurance coverage cannot be offered to residents of New York.
Is there a deadline to register for the credit monitoring product?
Yes. Individuals whose information was potentially exposed in connection with this incident are eligible for the Phase3 credit monitoring product and should promptly consider whether they wish to register. The deadline to register is 90 days from the date on their notification letter.
I am having trouble with the Experian website, what do I do?
If you have received your credit monitoring activation code, have visited the correct site, yet are still having trouble, please contact Experian’s toll free Customer Care center at 1-866-252-0121.
How do I request a copy of my credit report?
You can request a free copy of your credit report once a year from each of the three main credit bureaus through the Annual Credit Report Request Service by calling 1-877-322-8228 or visiting www.annualcreditreport.com. Many people choose to stagger their requests so they receive a copy from one of the agencies every four months.
You can call the numbers below, or you can visit their websites for further contact information:
Equifax: 1-800-685-1111 (www.equifax.com)
Experian: 1-888-397-3742 (www.experian.com)
TransUnion: 1-877-322-8228 (www.transunion.com)
What should I look for in my credit report?
In your credit report, be alert for any suspicious activity. Look especially for any accounts you didn’t open and any charges you didn’t make. Look at the inquiries or requests section for names of creditors from whom you haven't requested credit. Look in the personal information section to confirm the accuracy of addresses where you have lived and your Social Security number. Any suspicious activity in these areas may be indications of a fraud attempt. Also be alert for calls from creditors or debt collectors about bills that you don't recognize and for unusual charges on your credit card bills.
What if I find a problem in my credit report?
Individuals affected by the laptop theft are being provided with a complimentary credit monitoring product through Consumernfo.com, an Experian® company. We strongly recommend that you activate your credit monitoring membership. If you find anything that looks wrong or suspicious, put your credit monitoring product to work and contact Consumernfo.com, Inc. In addition, Phase3 will work with law enforcement to investigate any suspected incidents of identity theft.
What is a fraud alert?
A fraud alert indicates to anyone requesting your credit file that you suspect you may be a victim of fraud or identity theft. When you or someone else attempts to open a credit account in your name, increase the credit limit on an existing account, or obtain a new card on an existing account, the creditor should take steps to verify that you have authorized the request. If it cannot, the request should not be satisfied.
How do I place a fraud alert on my credit file?
To place a fraud alert, call one of the following three major credit reporting bureaus. Your phone call will take you to an automated phone system. Listen carefully to the selections and indicate that you are at risk for credit fraud. Fraud alerts last 90 days. If you are the victim of identity theft, you can choose a seven-year extended alert. Each credit reporting company has further details on these options. You only need to contact one of these companies, and that agency will automatically forward the fraud alert to the other two companies.
TransUnion
1-800-680-7289
Fraud Victim Assistance Department
P.O. Box 6790
Fullerton, CA 92834
http://www.tuc.com
Can I extend a fraud alert placed on my credit file?
You can obtain more information about how to request an extended fraud alert through the three major credit reporting bureaus (i.e., Equifax, Experian and TransUnion).
What is a security freeze and how do I place one on my credit file?
A security freeze means that your file cannot be shared with potential creditors or other persons opening new accounts unless you decide to unlock your file by contacting a credit reporting bureau and providing a PIN or password. Most businesses will not open credit accounts without first checking a consumer’s credit history.
If your credit files are frozen, even someone who has your name and Social Security number would not likely be able to get credit in your name. Please visit Placing a Security Freeze for additional information.
**View Phase 3's new offer to reimburse cost of a credit freeze by clicking here**
Will someone call me to confirm that my information has been stolen?
Phase3 will NOT make personal phone calls to affected individuals about this incident. In other cases of identity theft, people have reportedly been contacted by individuals claiming to represent the affected organization and then proceed to ask for personal information, including social security numbers and/or credit card information. Please always be cautious if somebody asks you for your Social Security number, credit card information, bank information or other personal information in a call that you did not originate. We recommend that you do not release personal information in response to any contacts of this nature that you did not initiate yourself.
Because identity theft crimes are on the rise, we recommend that everyone understand these precautionary steps to help guard themselves against potential identity theft.
Other Resources:
U.S. Department of Justice
This site provides a wide range of basic information about identity fraud.
http://www.usdoj.gov/criminal/fraud/websites/idtheft.html
Federal Trade Commission
This is the main U.S. government site for identity theft information. You can also file an online report of identity theft.
http://www.ftc.gov/bcp/edu/microsites/idtheft/
Identity Theft Resource Center
1-858-693-7935
This nonprofit organization provides consumer alerts, scam warnings and instructions for victims of identity theft.
http://www.idtheftcenter.org/
Privacy Rights Clearinghouse
1-619-298-3396
This nonprofit consumer information and advocacy organization offers fact sheets about privacy issues and identity theft.
http://www.privacyrights.org/identity.htm