UPDATE ON ELECTRONIC POLL BOOK VOTER INFORMATION DATA
This notice supplements the August 17, 2017 press releases issued by Election Systems & Software (“ES&S”) and the Chicago Board of Election Commissioners (“Board”) with respect to the recent data
security incident involving Chicago voter registration information (“Incident”).
ES&S takes the security of your personal information very seriously, and sincerely apologizes for any inconvenience this Incident may cause. This update contains information about what happened, resources we are making available to you, and steps you can take to protect your identity.
As previously reported, on August 12, 2017 an Internet cybersecurity researcher discovered back-up files stored on an Amazon Web Services (“AWS”) server containing personal information of registered voters in the City of Chicago. The Incident was promptly reported to state and local authorities the same day, and the data exposure was remedied within hours.
The back-up files stored on the AWS server were maintained by the Board’s electronic poll book vendor, ES&S. The personal information contained in the back-up files included voter names, addresses, and dates of birth, and many voters’ driver’s license and State ID numbers and the last four digits of Social Security numbers.
Upon discovery of the Incident, ES&S promptly took the AWS server off-line, secured the back-up files, and commenced a forensics investigation. ES&S also hired two specialized third-party vendors to conduct searches to determine whether any personal information stored on the back-up files was available on the Dark Web. The results of ES&S’ investigations have not uncovered any evidence that any voter’s personal information stored on the AWS server was misused.
In addition, the back-up files ES&S stored on the AWS server had no impact on any of the Board’s voter records and had no impact on the vote tabulations or results of any elections. No computer network systems or web sites directly managed by the Board were exposed at any time. The Board’s web sites do not contain any personally identifiable information as described above.
Nonetheless, out of an abundance of caution, ES&S has arranged to have Kroll provide potentially affected voters with Fraud Consultation and Identity Theft Restoration at no cost to voters for one year. Kroll is a global leader in risk mitigation and response, and their team has extensive experience helping people who have sustained an unintentional exposure of confidential data.
Additional information describing the services is included with this update.
We encourage you to remain vigilant and to review your credit reports periodically for any unauthorized activity. You may obtain a copy of your credit report, free of charge, whether or not you suspect any unauthorized activity on your account from each of the three nationwide credit reporting agencies. To order your free credit report, please visit https://www.annualcreditreport.com, or call toll-free at 1-877-322-8228. You can also order your annual free credit report by mailing a completed Annual Credit Report Request Form (available at https://www.annualcreditreport.com/manualRequestForm.action) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA, 30348-5281.
If you suspect that you are the victim of identity theft, in addition to the services we are providing above, you may contact the credit reporting agencies, the Federal Trade Commission, and the Illinois Attorney General about fraud alerts, security freezes, and steps you can take toward preventing identity theft.
Federal Trade Commission
Consumer Response Center
600 Pennsylvania Ave, NW
Washington, DC 20580
Illinois Attorney General
Identity Theft Hotline
500 S. Second Street
Springfield, IL 62701
P.O. Box 9532
Allen, TX 75013
TransUnion, Fraud Victim Assistance Division
P.O. Box 6790
Fullerton, CA 92834
P.O. Box 740241
Atlanta, GA 30374
Please be assured that we take the security of voter information very seriously, and we deeply regret the inconvenience and concern this may have caused you. If you have any questions or concerns, please call 1-833-202-7412, Monday through Friday, 8:00 a.m. to 5:00 p.m. Central Time, excluding major holidays.
TAKE ADVANTAGE OF YOUR IDENTITY MONITORING SERVICES
You’ve been provided with access to the following services from Kroll:
You have unlimited access to consultation with a Kroll fraud specialist. Support includes showing you the most effective ways to protect your identity, explaining your rights and protections under the law, assistance with fraud alerts, and interpreting how personal information is accessed and used, including investigating suspicious activity that could be tied to an identity theft event.
Identity Theft Restoration
If you become a victim of identity theft, an experienced Kroll licensed investigator will work on your behalf to resolve related issues. You will have access to a dedicated investigator who understands your issues and can do most of the work for you. Your investigator can dig deep to uncover the scope of the identity theft, and then work to resolve it.