Data Security Incident
Notification of Data Security Incident
[Date Posted] – On January 3, 2023, Spirit Services discovered suspicious activity related to a series of financial transactions. Upon discovery, Spirit Services launched an internal investigation and engaged leading, independent cybersecurity specialists to investigate the full nature and scope of this incident. Based on this investigation, Spirit Services confirmed that certain email accounts were subject to access by an unauthorized third party.
Following a thorough analysis, it was determined that information contained in the affected email accounts may have included personally identifiable information (“PII”). The type of information contained within the affected data includes first and last names, in combination with one or more of the following: date of birth, Social Security number, driver’s license number or State ID number, financial account information, payment card information, health insurance information and/or medical information.
At this time, Spirit Services is not aware of any evidence to suggest that any information has been fraudulently misused. However, Spirit Services was unable to rule out the possibility that the information may have been accessed during the period of compromise. Therefore, out of an abundance of caution, Spirit Services is notifying potentially impacted individuals of this incident.
In response to this incident, Spirit Services has partnered with third-party forensic specialists to fully investigate the nature and scope of this matter, and to evaluate and reinforce existing security measures and facilities within the network to ensure optimal data security. Although Spirit Services has no reason to believe any individual’s information has been or will be misused as a result of this incident, individuals are nonetheless encouraged to monitor their credit reports and account statements for suspicious activity and to detect errors.
Spirit Services has established a toll-free number to answer questions about the incident and to address related concerns. The number to call is (866) 547-0885, Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.
Spirit Services takes the privacy and security of the information in its care seriously, and sincerely regrets any worry or inconvenience this incident may have caused.
What steps can I take to protect my private information?
- If you detect suspicious activity on any of your accounts, you should promptly notify the financial institution or company with which the account is maintained. You should also report any fraudulent activity or any suspected incidents of identity theft to law enforcement.
- You may obtain a copy of your credit report at no cost from each of the three nationwide credit reporting agencies. To do so, visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three agencies appears at the bottom of this page.
- You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The FTC’s website offers helpful information at www.ftc.gov/idtheft.
Was my information specifically impacted?
Spirit Services has no evidence to suggest that any information was subject to actual misuse. Upon learning of the potential unauthorized access, we performed a thorough review to determine the types of information that may have been present within the affected data. We are providing notification in an abundance of caution.
How do I obtain a copy of my credit report?
You can obtain a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies once every twelve (12) months. To do so, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three agencies is included in the notification letter and is also listed at the bottom of this page.
How do I put a fraud alert on my account?
A fraud alert informs creditors of possible fraudulent activity within your report and requests that creditors contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact Equifax, Experian or TransUnion and follow the Fraud Victims instructions. To place a fraud alert on your credit accounts, contact your financial institution or credit provider. Contact information for the three nationwide credit reporting agencies is listed below.
Contact information for the three nationwide credit reporting agencies is as follows:
TransUnion 1-800-680-7289 www.transunion.com
TransUnion Fraud Alert P.O. Box 2000 Chester, PA 19016-2000
TransUnion Credit Freeze P.O. Box 160 Woodlyn, PA 19094 |
Experian 1-888-397-3742
Experian Fraud Alert P.O. Box 9554 Allen, TX 75013
Experian Credit Freeze P.O. Box 9554 Allen, TX 75013 |
Equifax 1-888-298-0045 www.equifax.com
Equifax Fraud Alert P.O. Box 105069 Atlanta, GA 30348-5069
Equifax Credit Freeze P.O. Box 105788 Atlanta, GA 30348-5788 |
Additional Information
You can further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect your personal information by contacting the credit reporting bureaus, the Federal Trade Commission (FTC), or your state Attorney General. The FTC also encourages those who discover that their information has been misused to file a complaint with them. The FTC may be reached at 600 Pennsylvania Ave. NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261.
You have the right to file a police report if you ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof that you have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement, your state Attorney General, and the FTC. This notice has not been delayed by law enforcement.