Frequently Asked Questions
(Adapted in part and with gratitude to the University of California at Berkley)
- How do I know if my information was stolen?
- How will I know if any of my personal information was used by someone else?
- Do I have to pay for the credit report?
- What should I do if I suspect fraud?
- What is a fraud alert?
- What should I look for on my credit report?
- What happens if I find out that I have been a victim of identify theft?
- I called the credit bureau fraud line and they asked for my Social Security number. Is it okay to give it?
- Do I have to call all three credit bureaus?
- Why can't I talk to someone at the credit bureaus?
- How long does it take to receive my credit report?
- How long does a fraud alert last?
- Will a fraud alert stop me from using my credit cards?
- Can I still apply for credit after I place a fraud alert on my credit report?
- Should I contact the Social Security Administration and change my Social Security number?
- Should I close my bank account?
- Should I close my credit card or other accounts?
- What specific items of my personal information were at risk?
- What steps are you taking to improve the security of personal information on campus computers?
Q: How do I know if my information was stolen?
A. Those identified as at risk include KCC students
who applied for or were granted financial aid any time between January 1, 2004 and April 15, 2009, and prior loan borrowers. If you supplied
parental information on your financial aid forms, your parents are also at
risk. This does not automatically mean your information was stolen. Identity
theft is usually discovered "after the fact" (that is, after your
information has been used fraudulently); therefore the university recommends
that you check your credit reports for any unusual or suspicious activities.
Q. How will I know if any of my
personal information was used by someone else?
A. The best way to find out is to obtain and
carefully review your credit reports. You can order free credit reports from
all three credit agencies at http://www.annualcreditreport.com or by calling 877-322-8228.
If you notice accounts on your credit report that you did not open or applications for credit ("inquiries") that you did not make, these could be indications that someone else is using your personal information, without your permission.
back to top
Q. Do I have to pay for the credit report?
A. No. Federal law entitles you to a free copy of
your credit report from each of the three credit reporting agencies.
Q. What should I do if I suspect fraud?
A. If you suspect fraud, you can place a fraud alert
on your credit report free of charge which will entitle you to a free copy of
your credit report. However, you should be familiar with the effects of placing
a fraud alert on your information prior to doing so. To place a fraud alert on
your information, contact the fraud department at any one of the three major
credit bureaus:
- Equifax: 1-877-576-5734; www.equifax.com
- Experian: 1-888-397-3742; www.experian.com
- TransUnion: 1-800-680-7289; www.transunion.com
The fraud alert requests creditors to contact you before opening any new accounts or making any changes to your existing accounts. As soon as the credit bureau confirms your fraud alert, the other two credit bureaus will be automatically notified to place fraud alerts. For more detailed information regarding placing a fraud alert, see Placing a Fraud Alert.
Q. What is a fraud alert?
A. A fraud alert is a message that credit issuers
receive when someone applies for new credit in your name. The message tells
creditors that there is possible fraud associated with the account and gives
them a phone number to call (yours) before issuing new credit. When you call
the credit bureau fraud line, you will be asked for identifying information and
will be given the opportunity to enter a phone number for creditors to call.
Q. What should I look for on my credit report?
A. Look for any accounts that you don't recognize,
especially accounts opened recently. Look at the inquiries or requests section
for names of creditors from whom you haven't requested credit.
Note that some kinds of inquiries, labeled something like "promotional inquiries," are for unsolicited offers of credit, mostly from companies with whom you do business. Don't be concerned about those inquiries as a sign of fraud. (You are automatically removed from lists to receive unsolicited pre-approved credit offers when you put a fraud alert on your account. You can also stop those offers by calling 888-5OPTOUT.)
Look in the personal information section for addresses where you've never lived. Any of these things might be indications of fraud. Also be on the alert for other possible signs of identity theft, such as calls from creditors or debt collectors about bills that you don't recognize, or unusual charges on your credit card bills.
If you find items you don't understand on your report, call the credit bureau at the number given on the report. Credit bureau staff will review your report with you. If the information can't be explained, then you will need to call the creditors involved and report the crime to your local police department. For more information on what to do in this case, visit the Federal Trade Commission Identity Theft website at /.
Q. What happens if I find out that I have been
a victim of identify theft?
A. You should contact your local law enforcement
agency and file a police report. Also contact any creditors involved and notify
the credit bureaus. For more details on what to do, see the Federal Trade
Commission Identity Theft website at http://www.ftc.gov/idtheft/.
Q. I called the credit bureau fraud line and they
asked for my Social Security number. Is it okay to give it?
A. The credit bureaus ask for your Social Security
number and other information in order to identify you and avoid sending your
credit report to the wrong person. If, however, you are contacted by
individuals claiming to represent the University regarding this or some other
security incident, and who then proceed to ask for personal information, we
recommend caution. Please be aware that UH will only contact you with
information regarding steps you should take to prevent possible fraud or
identity theft; or if you ask us, by email or telephone, for information. We
will not ask for your full Social Security number. We will not ask for credit
card or bank information. We recommend that you do not release personal
information in response to any contacts of this nature that you have not
initiated.
Q. Do I have to call all three credit bureaus?
A. No. If you call just one of the bureaus, they
will notify the other two. A fraud alert will be placed on your file with all
three and you will receive a confirming letter from all three.
Q. Why can't I talk to someone at the credit bureaus?
A. You must first order your credit reports. When
you receive your reports, each one will have a phone number you can call to
speak with someone in the bureau's fraud unit. If you see anything on any of
your reports that looks unusual or that you don't understand, call the number
on the report.
Q. How long does it take to receive my credit
report?
A. It could take about 20 days from the day you call
the credit bureaus. It takes about 5 to 10 days from the time you call the
credit bureaus to get your fraud alert confirmation letter with instructions on
ordering your credit report. You should receive your reports in another 5 to 10
days from the time you order them.
Q. How long does a fraud alert last?
A. An initial fraud alert lasts 90 days. You can
remove an alert by calling the credit bureaus at the phone number given on your
credit report. If you want to reinstate the alert, you can do so. If you are
the victim of identity theft, you can place an Extended Fraud Victim Alert on
your report by submitting a copy of a valid identity theft report that you have
filed with a federal, state or local law enforcement agency. An Extended Alert
will remain on your report for seven years.
Q. Will a fraud alert stop me from using my
credit cards?
A. No. A fraud alert will not stop you from using
your existing credit cards or other accounts. It may slow down your ability to
get new credit. Its purpose is to help protect you against an identity thief
trying to open credit accounts in your name. Credit issuers get a special
message alerting them to the possibility of fraud. Creditors know that they
should re-verify the identity of the person applying for credit.
Q. Can I still apply for credit after I place a
fraud alert on my credit report?
A. You should still be able to get credit. While a
fraud alert may slow down the application process, you can prove your identity
to a prospective creditor by providing identifying information.
Q. Should I contact the Social Security
Administration and change my Social Security number?
A. The Social Security Administration very rarely
changes a person's SSN. And the mere possibility of fraudulent use of your SSN
would probably not be viewed as a justification. There are drawbacks to doing
so. The absence of any history under the new SSN would make it difficult to get
credit, continue college, rent an apartment, open a bank account, get health
insurance, etc. In most cases, getting a new SSN would not be a good idea.
Q. Should I close my bank account?
A. No; we did not have any bank account numbers on
file. (As a general privacy protection measure, you should limit the use of your
SSN where it's not required. For example, if your bank account number or PIN is
your SSN, you should ask the bank to give you a different number. Do NOT use
the last four digits of your SSN, your mother's maiden name, or your birth date
as a password for financial transactions.)
Q. Should I close my credit card or other
accounts?
A. No; no account number information was among the
items of personal information. (As a general privacy protection measure, you
should always look over your credit card bills carefully to see if there are
any purchases you didn't make. If so, contact the card company immediately.)
Q. What specific items of my personal
information were at risk?
A. Your name, address, phone number, date of birth
and social security number were involved.
Q. What steps are you taking
to improve the security of personal information on campus computers?
A. Kapi`olani Community College has taken steps to
ensure that a similar incident does not recur. While University of Hawai`i policy calls for protecting computers with password-protected accounts and use of anti-malware software,
the infected computer contained an older version of the security software, which is how the compromised computer is believed to
have been infected. The College will be implementing additional security measures
including minimizing the storage of sensitive information, employing
encryption, verifying that computers used to access sensitive information are
up-to-date with the latest version of anti-malware software and re-training all staff in safe computing practices.
While there was no malice on the part of any college employee, the Honolulu
Police Department and FBI have been notified of the incident and asked to
investigate any potential criminal activity related to this incident. The University is also conducting an internal
investigation to prevent similar situations from occurring and to improve our
operational procedures.
