SUBSTITUTE PUBLIC NOTICE OF DATA BREACH

Posted 06/28/2024

What happened? Ingo Money discovered that an outside unauthorized third-party accessed and publicly disclosed certain information from a limited portion of our corporate computer network in November 2023. The incident affected only a small subset of Ingo Money corporate servers and some older, archived information housed in our corporate environment.

This incident did not affect any payment activity or any Ingo Money apps. The incident did not affect or compromise in any way any Ingo production system, including our payment processing systems or check processing systems. The Ingo Money app, ongoing payment activity, and processing of checks were not affected. Aside from Ingo Money, no other companies’ systems were impacted by this incident. Ingo Money app functionality was not impacted.

What we are doing and what information was involved? Outside cyber professionals promptly contained the threat and implemented additional security safeguards. Law enforcement also was notified. Cyber professionals continue to closely monitor our systems 24/7/365 for any unusual activity.

Upon discovery, an extensive outside review was conducted to assess the data involved to identify individuals requiring notification, and Ingo Money began receiving the final mailing list to be able to notify individuals on or about June 26, 2024. The information affected and the relationship of the parties vary widely by individual. The files may include information such as names, addresses, dates of birth, ID numbers, Ingo payment card numbers, bank account/routing numbers, etc. and a smaller number had what appeared to be a social security number or individual taxpayer identification number. We are notifying affected individuals at their last known email or mailing address (if the address is known to us) and providing identity theft protection for certain impacted individuals, if and when required by law.

What you can do? Individuals should always utilize credit monitoring tools. It is always advisable to remain vigilant for incidents of fraud or identity theft. Individuals should carefully review their financial account statements and monitor their free credit reports for suspicious activities to detect and respond to errors. Individuals may obtain a copy of their credit report, free of charge, once every 12 months from each of three national credit bureaus (contact information is below). To order an annual free credit report, visit www.annualcreditreport.com or call toll free at 1-877-322-8228.

For more information: Individuals who are current or former employees of Ingo Money or who utilize Ingo Money check cashing services and/or are concerned that they may have been affected by this incident may call toll-free (866) 810-5520 between 8 a.m. – 5:30 p.m. Central Time, Monday through Friday (excluding major U.S. holidays).

Individuals also have a right to place a ‘security freeze’ on their credit report, which will prohibit a credit bureau from releasing information in a credit report without express authorization. A security freeze is designed to prevent credit, loans, and services from being approved without consent. Using a freeze may delay, interfere with, or prohibit the timely approval of any subsequent request or application made regarding a new loan, credit, mortgage, or any other account involving extension of credit. A security freeze generally does not apply to existing account relationships and when a copy of a report is requested by existing creditor or its agents or affiliates for certain types of account review, collection, fraud control or similar activities. It is free to place, lift, or remove a security freeze. To place a security freeze on credit report, contact each of the credit reporting agencies listed below and clearly explain in the call/letter that a security freeze is being requested.

As an alternative to a security freeze, individuals have the right to place an initial or extended fraud alert on their credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. Victims of identity theft are entitled to an extended fraud alert, which is an alert lasting 7 years. Contact the 3 credit bureaus listed below to activate an alert.

CONTACT INFORMATION FOR THE THREE NATIONAL CREDIT BUREAUS AS FOLLOWS:

  • Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-378¬4329
  • Experian, PO Box 2002, Allen, TX 75013, www.experian.com, 1-888-397-3742
  • TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800¬916-8800

Individuals may also contact the bureaus for information on how to prevent or minimize the risks of identity theft or the following: The office of their State Attorney General or the Federal Trade Commission at www.ftc.gov/idtheft; FTC hotline is 877¬438-4338; TTY: 1-866-653-4261 or write to FTC, 600 Pennsylvania Ave., NW, Washington, D.C. 20580.

Individuals have a right to a police report about this incident (if any exists). Identity theft victims have the right to file a police report and obtain a copy of it. Notification of this incident has not been delayed as a result of a law enforcement investigation.

ADDITIONAL INFORMATION FOR THE RESIDENTS OF THE FOLLOWING STATES:

  • Connecticut: You may contact and obtain information from Connecticut Attorney General’s Office, 165 Capitol Ave, Hartford, CT 06106, 1-860-808¬5318, www.ct.gov/ag
  • District of Columbia: You may contact and obtain information from Office of the Attorney General for the District of Columbia, 400 6th Street, NW, Washington, DC 20001, 1-202-727-3400, databreach@dc.gov, www.oag.dc.gov
  • Iowa: You are advised to report any suspected identity theft to law enforcement or Iowa Attorney General, 1305 E. Walnut Street, Des Moines, IA 50319, https://www.iowaattorneygeneral.gov, 515-281-5926 or 888-777¬4590.
  • Maryland: You may contact and obtain information from your state attorney general at Maryland Attorney General’s Office – Consumer Protection Division, 200 St. Paul Place, Baltimore, MD 21202, 1-410-576-6300; https://www.marylandattorneygeneral.gov/ Consumer Hotline 1-410-528¬8662, or consumer@oag.state.md.us. You may contact Ingo Money directly at 11545 Wills Rd, Ste 130, Alpharetta, GA 30009.
  • Massachusetts: You may contact and obtain information from Office of Massachusetts Attorney General, One Ashburton Place, Boston, MA 02108, 1¬617-727-8400, www.mass.gov/ago/contact-us.html. The mitigation services outlined above are offered pursuant to Mass. Gen. Laws Ann. Ch.93H, § 3(b).
  • New York: You may contact and obtain information from New York Department of State Division of Consumer Protection, One Commerce Plaza, 99 Washington Ave., Albany, NY 12231-0001, 518-474-8583 / 1-800-697-1220, http://www.dos.ny.gov/consumerprotection; and New York State Attorney General, The Capitol, Albany, NY 12224-0341, 1-800-771-7755, https://ag.ny.gov
  • North Carolina: You may contact and obtain information from North Carolina Attorney General’s Office, Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699, 1-919-716-6000 / 1-877-566-
    7226, www.ncdoj.gov
  • Oregon: You are advised to report any suspected identity theft to law enforcement, FTC, and Oregon Attorney General, 1162 Court Street, NE, OR 97301, http://www.doj.state.or.us, 503-378-6002.
  • Rhode Island: You may contact and obtain information from Rhode Island Attorney General Office150 South Main Street, Providence, RI 02903, 1-401-274-4400, www.riag.ri.gov.
  • South Carolina: South Carolina Department of Consumer Affairs may be reached at 293 Greystone Blvd., Ste. 400, Columbia, SC 29210, www.consumer.sc.gov, 800-922-1594.
  • Vermont: If you do not have Internet access but would like to learn more about how to place a security freeze on your credit report, contact the Vermont Attorney General’s Office at 802-656-3183 (800-649-2424 toll free in Vermont only).