The Frank Olean Center (FOC), dedicated to providing support and services to individuals with intellectual and developmental disabilities, is committed to maintaining the privacy and security of personal information. Regrettably, FOC recently detected suspicious activity within its business email environment, prompting immediate action to secure systems and conduct a thorough forensic investigation.
Upon detection of the suspicious activity on or about September 15, 2023, FOC swiftly engaged independent third-party forensic specialists to analyze the extent of unauthorized access. The investigation revealed that certain email accounts were compromised in the attack, potentially exposing personal information of individuals associated with FOC. While the types of information accessed varied for each individual, it is possible that names, mailing addresses, and dates of birth may have been exposed.
To date, FOC has not received any reports of related identity theft. However, the organization is committed to transparency and wishes to inform affected individuals of the incident and the proactive steps being taken to mitigate risks. FOC has prioritized the implementation of additional safeguards and enhanced security measures to prevent similar incidents in the future. This includes a comprehensive review of policies and procedures related to system security and information management.
In response to the incident, FOC is providing affected individuals with access to Single Bureau Credit Monitoring services at no charge. These services offer credit file alerts for twelve months from enrollment, providing timely notifications of any changes or updates. Additionally, proactive fraud assistance will be available through Cyberscout via Identity Force, offering support and guidance in the event of fraud victimization.
Affected individuals are encouraged to enroll in Credit Monitoring services within 90 days from the date of this notification by visiting https://secure.identityforce.com/benefit/foc and entering the unique enrollment code provided in the notification letter. While signing up, individuals may be required to verify personal information for identity confirmation.