Lee University - Notice of Data Security Incident 

Cleveland, Tennessee – December 17, 2024 – Lee University has learned of a data security incident that may have involved personal information for individuals associated with the university, including current and/or former students. This notification provides information about the incident and resources available to assist potentially impacted individuals.

Earlier this year, Lee University discovered evidence of unusual activity on our network systems through a third-party software vulnerability. After detecting the third-party vulnerability and containing the incident, we immediately took measures to secure our network, systems, and data. We also enlisted the assistance of independent cybersecurity experts to conduct a forensic investigation into the incident and assist in determining what happened. Our investigation revealed that some university data was downloaded from our systems.

We are in the process of comprehensively reviewing all potentially affected data to more fully understand the potential impact. At the conclusion of this process, we will be arranging for notification to any individuals whose information may be involved. The notification will include information about the incident and about steps that potentially impacted individuals can take to help protect their information.

In the interim, if you are a current or former Lee University student or employee, we encourage you to take advantage of complimentary IDX identity protection services offered to you. These services include credit monitoring, identity restoration services, and identity protection insurance. Should you wish to enroll, need assistance enrolling, or have questions about this incident, please contact our dedicated team at (877) 719-6522. Call center representatives are available Monday through Friday from 9:00 AM – 9:00 PM Eastern Time

Data privacy and security are among Lee University’s highest priorities. We have implemented additional measures to enhance the security of our digital environment in an effort to minimize the likelihood of a similar event from occurring in the future. Above all we are grateful for your consistent patience, understanding, and cooperation.

We are providing the following information to help those wanting to know more about steps they can take to protect themselves and their personal information:

What steps can I take to protect my personal information?

· Please notify your financial institution immediately if you detect any suspicious activity on any of your accounts, including unauthorized transactions or new accounts opened in our name that you do not recognize. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities.

· Consider changing passwords for your accounts.

· You can request a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To do so, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting agencies is listed at the bottom of this page.

· You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The FTC’s website offers helpful information at www.ftc.gov/idtheft.

Internal Revenue Service Identity Protection PIN (IP PIN)

You may obtain an Identity Protection PIN (IP PIN) from the Internal Revenue Service – a six-digit number that prevents someone else from filing a tax return using your Social Security number or Individual Taxpayer Identification Number. The IP PIN is known only to you and the IRS, and helps the IRS verify your identity when you file your electronic or paper tax return. Information about the IP PIN program can be found here: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin.

How do I obtain a copy of my credit report?

You can obtain a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To order your credit report, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Use the following contact information for the three nationwide credit reporting agencies:

How do I put a fraud alert on my account?

You may consider placing a fraud alert on your credit report. This fraud alert statement informs creditors to possible fraudulent activity within your report and requests that your creditor contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact Equifax, Experian or TransUnion and follow the Fraud Victims instructions. To place a fraud alert on your credit accounts, contact your financial institution or credit provider. Contact information for the three nationwide credit reporting agencies is included in the letter and is also listed at the bottom of this page.

How do I put a security freeze on my credit reports?

You also have the right to place a security freeze on your credit report. A security freeze is intended to prevent credit, loans and services from being approved in your name without your consent. To place a security freeze on your credit report, you need to make a request to each consumer reporting agency. You may make that request by certified mail, overnight mail, or regular stamped mail, or online by following the instructions found at the websites listed below. You will need to provide the following information when requesting a security freeze (note that if you are making a request for your spouse, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) address. You may also be asked to provide other personal information such as your email address, a copy of a government-issued identification card, and a copy of a recent utility bill or bank or insurance statement. It is essential that each copy be legible, display your name and current mailing address, and the date of issue. There is no charge to place, lift, or remove a freeze. You may obtain a security freeze by contacting any one or more of the following national consumer reporting agencies:

What should I do if my family member was involved in the incident and is deceased?

You may choose to notify the three major credit bureaus, Equifax, Experian and Trans Union, and request they flag the deceased credit file. This will prevent the credit file information from being used to open credit. To make this request, mail a copy of your family member’s death certificate to each company at the addresses below.