We are writing to inform you of a data security incident experienced by our company, Chicago Fire Football Club, that may have involved your information as described below. We were unable to locate all the addresses of the individuals affected. As a result, we are issuing this public notice to inform all potentially impacted individuals. We take the privacy and security of all information very seriously and are providing information about the incident and steps you can take to help protect your information.
What Happened: On October 25, 2023, we learned of an unauthorized access to our systems that included records containing personal information. Upon discovery, we took immediate action to secure our systems and to address and investigate the incident, which included retaining legal counsel and engaging outside forensic specialists (via counsel) to determine the nature and scope of the incident. After a thorough investigation, we learned that an unauthorized actor gained access to our systems between October 22, 2023 and October 25, 2023, and acquired certain personal data. As part of the investigation, a detailed review of our systems’ contents was performed to determine the information that may have been impacted and to whom that information related.
What Information Was Involved: The types of information that may have been contained within the impacted data includes first and last name, in combination with the following data element(s): social security numbers, driver’s license, passport information, medical information, including Covid test results and injury reports, health insurance information, financial account information, and date of birth. Please note that we currently have no indication that your information has been misused as a result of this incident.
What We Are Doing
Upon learning of the incident, we immediately took steps to address it, including by retaining legal counsel and engaging outside forensic specialists (via counsel) to assist with determining the nature and scope of the incident as outlined above. Additionally, we are providing you access to credit monitoring provided by Cyberscout, a TransUnion company specializing in fraud assistance and remediation services. Instructions on how to enroll in these complimentary services and additional resources available to you are included in the enclosed “Steps You Can Take to Help Protect Your Information.” Please call Chicago Fire Football Club at 872-710-0523 between the weekday hours of 9:30 am and 4:30 pm CST to confirm eligibility and receive a credit monitoring code.
If you believe you may have been affected by this breach and have not received a notification from us, please do not hesitate to contact Chicago Fire Football Club at 872-710-0523 between the weekday hours of 9:30 am and 4:30 pm CST to confirm eligibility and receive a credit monitoring code. If you have any questions regarding the incident, please do not hesitate to contact our dedicated support team at 1-800-405-6108. Additionally, we have reported this incident to law enforcement.
What You Can Do: We recommend that you remain vigilant against incidents of identity theft and fraud by reviewing your credit reports and account statements for suspicious activity and to detect errors. If you discover any suspicious or unusual activity on your accounts, please promptly contact the financial institution or company.
For More Information: If you believe you may have been affected by this breach and have not received a notification from us, please do not hesitate to contact Chicago Fire Football Club at 872-710-0523 between the weekday hours of 9:30 am and 4:30 pm CST to confirm eligibility and receive a credit monitoring code. If you have any questions regarding the incident, please do not hesitate to contact our dedicated support team at 1-800-405-6108. Please know that the security of information is of the utmost importance to us. We stay committed to protecting your trust in us and continue to be thankful for your support during this time.
Sincerely,
Pawel Szynalik
Chief Financial Officer
Enclosure: Steps You Can Take to Help Protect Your Information
STEPS YOU CAN TAKE TO HELP PROTECT YOUR INFORMATION
To enroll in Credit Monitoring services at no charge, please log on to https://bfs.cyberscout.com/activate and follow the instructions provided. When prompted please provide your unique code.
In order for you to receive the monitoring services described above, you must enroll within 90 days from the date of this letter. The enrollment requires an internet connection and e-mail account and may not be available to minors under the age of 18 years of age. Please note that when signing up for monitoring services, you may be asked to verify personal information for your own protection to confirm your identity.
Monitor Your Accounts and Credit Reports
We encourage you to remain vigilant against incidents of identity theft and fraud by reviewing your credit reports/account statements and explanation of benefits forms for suspicious activity and to detect errors. Under U.S. law, you are entitled to one free credit report annually from each of the three major credit reporting bureaus, TransUnion, Experian, and Equifax. To order your free credit report, visit www.annualcreditreport.com or call 1-877-322-8228. Once you receive your credit report, review it for discrepancies and identify any accounts you did not open or inquiries from creditors that you did not authorize. If you have questions or notice incorrect information, contact the credit reporting bureau.
You have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a one-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any of the three credit reporting bureaus listed below.
As an alternative to a fraud alert, you have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without your express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a credit freeze may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report. To request a credit freeze, you should provide the following information:
- Full name (including middle initial as well as Jr., Sr., III, etc.);
- Social Security number;
- Date of birth;
- Address for the prior two to five years;
- Proof of current address, such as a current utility or telephone bill;
- A legible photocopy of a government-issued identification card (e.g., state driver’s license or identification card); and
- A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft, if you are a victim of identity theft.
Should you wish to place a fraud alert or credit freeze, please contact the three major credit reporting bureaus listed below:
Additional Information
You can further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect your personal information by contacting the credit reporting bureaus, the Federal Trade Commission (FTC), or your state Attorney General. The FTC also encourages those who discover that their information has been misused to file a complaint with them. The FTC may be reached at 600 Pennsylvania Ave. NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261.
You have the right to file a police report if you ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof that you have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement, your state Attorney General, and the FTC. This notice has not been delayed by law enforcement.
For D.C. residents, the District of Columbia Attorney General may be contacted at 441 4th Street NW #1100, Washington, D.C. 20001; 202-727-3400, and https://oag.dc.gov/consumer-protection.
For Maryland residents, the Maryland Attorney General may be contacted at Office of the Attorney General, 200 St. Paul Place, Baltimore, MD 21202; 1-888-743-0023; or www.marylandattorneygeneral.gov.
For New York residents, the New York Attorney General may be contacted at Office of the Attorney General, The Capitol, Albany, NY 12224-0341; 1-800-771-7755; or https://ag.ny.gov.
For North Carolina residents, the North Carolina Attorney General may be contacted at 9001 Mail Service Center, Raleigh, NC 27699-9001; 1-877-566-7226 or 1-919-716-6000; and www.ncdoj.gov.
For Oregon residents, the Oregon Attorney General may be contacted at Oregon Department of Justice, 1162 Court St. NE, Salem, OR 97301-4096; 1-877-877-9392; and https://doj.state.or.us/consumer-protection/
For Rhode Island residents, the Rhode Island Attorney General may be contacted at 150 South Main Street, Providence, RI 02903; 1-401-274-4400; and www.riag.ri.gov. Under Rhode Island law, you have the right to obtain any police report filed in regard to this incident. There is 1 Rhode Island resident impacted by this incident.
