Bend FC Timbers Provides Notice of Data Security Incident
September 30, 2022 – Bend FC Timbers has learned of a data security incident that may have involved personal information
belonging to certain current and former Bend FC Timbers members. This notification provides information about the
incident and resources available to assist potentially impacted individuals.
What Happened? In August 2021, Bend FC Timbers discovered that former employees were in possession of accounts
and devices owned by the organization. In response, Bend FC Timbers promptly initiated a civil lawsuit and launched an
investigation. In so doing, Bend FC Timbers engaged independent digital forensics and incident response experts to
determine what information may have been acquired without authorization.
As part of this investigation, Bend FC Timbers undertook a comprehensive review of all information that may have been
acquired by the former employees. After conclusion of the review, Bend FC Timbers learned that certain personal
information belonging to our current and former members may have been impacted in connection with the incident. As soon
as Bend FC Timbers discovered that the incident impacted individual information, we immediately conducted a diligent
search to identify current contact information needed to notify potentially impacted individuals.
What Information Was Involved? The following personal information may have been involved in the incident: names,
dates of birth, Social Security numbers, driver’s license and/or passport numbers, payment card numbers with
CVV/expiration date, health insurance and/or medical information, and usernames/emails with passwords. However, not all
data elements were involved for every individual.
What Is Bend FC Timbers Doing? Bend FC Timbers has implemented measures to enhance the security of its digital
environment in an effort to minimize the risk of a similar incident occurring in the future. In addition, Bend FC Timbers
sent notification letters to the potentially impacted individuals beginning on September 29, 2022. These letters include
information about steps that individuals can take to protect their information. Bend FC Timbers recommends that individuals
follow the recommendations contained within the notification letter to ensure their information is protected.
Bend FC Timbers has also established a toll-free call center to answer questions about the incident and to address related
concerns. Call center representatives are available Monday through Friday from 6:00 A.M. to 6:00 P.M. Pacific Time and
can be reached at 1-833-903-3648. Individuals can also access information regarding the incident, services, and steps you
can take to protect your information online at https://response.idx.us/account-creation/protect. All potentially affected
individuals may qualify for complimentary credit monitoring and identity protection services through IDX. Individuals who
have not received a notification letter must obtain verification of eligibility through the call center to enroll in services.
What Can You Do? Bend FC Timbers encourages individuals to remain vigilant against incidents of identity theft and
fraud, to review account statements and explanations of benefits forms, and to monitor free credit reports for suspicious
activity and to detect errors.
The privacy and security of all personal and protected health information is a top priority for Bend FC Timbers, and we
deeply regret any inconvenience or concern this incident may cause.
We are also providing the following information to help those wanting to know more about steps they can take to protect
themselves:
What steps can I take to protect my personal information?
- Please notify your financial institution immediately if you detect any suspicious activity on any of your accounts,
including unauthorized transactions or new accounts opened in your name that you do not recognize. You should
also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement
authorities.
- You can request a copy of your credit report, free of charge, directly from each of the three nationwide credit
reporting agencies. To do so, free of charge once every 12 months, please visit www.annualcreditreport.com or call
toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting agencies is listed at the
bottom of this page.
- You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The
FTC’s website offers helpful information at www.ftc.gov/idtheft.
How do I obtain a copy of my credit report?
You may obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12
months by visiting http://www.annualcreditreport.com/, calling toll-free 877-322-8228, or by completing an Annual Credit
Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You
also can contact one of the following three agencies:
- TransUnion
P.O. Box 1000
Chester, PA 19016
1-800-916-8800
- Experian
P.O. Box 2002
Allen, TX 75013
1-888-397-3742
- Equifax
P.O. Box 740241
Atlanta, GA 30374
1-888-548-7878
How do I put a fraud alert on my account?
You may want to consider placing a fraud alert on your credit report. An initial fraud alert is free and will stay on your credit
file for one year. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor
contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact any of the
three credit reporting agencies identified above. Additional information is available at http://www.annualcreditreport.com.
How do I put a security freeze on my credit reports?
You have the right to place a security freeze on your credit report. A security freeze is intended to prevent credit, loans and
services from being approved in your name without your consent. To place a security freeze on your credit report, you need
to make a request to each consumer reporting agency. You may make that request by certified mail, overnight mail, or
regular stamped mail, or online by following the instructions found at the websites listed below. You will need to provide
the following information when requesting a security freeze (note that if you are making a request for your spouse, this
information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security
number; (3) date of birth; and (4) address. You may also be asked to provide other personal information such as your email
address, a copy of a government-issued identification card, and a copy of a recent utility bill or bank or insurance statement.
It is essential that each copy be legible, display your name and current mailing address, and the date of issue. There is no
charge to place, lift, or remove a freeze.
- Equifax Security Freeze
PO Box 105788
Atlanta, GA 30348
1-800-685-1111
- Experian Security Freeze
PO Box 9554
Allen, TX 75013
1-888-397-3742
- TransUnion (FVAD)
PO Box 2000
Chester, PA 19022
1-800-909-8872
What should I do if my family member’s information was involved in the incident and is deceased?
You may choose to notify the three major credit bureaus, Equifax, Experian and TransUnion, and request they flag the
deceased credit file. This will prevent the credit file information from being used to open credit. To make this request, mail
a copy of your family member’s death certificate to each company at the addresses below.
- Equifax
Equifax Information Services
P.O. Box 105169,
Atlanta, GA 30348
- Experian
Experian Information Services
P.O. Box 9701
Allen, TX 75013
- TransUnion
Trans Union Information
Services
P.O. Box 2000
Chester, PA 19022
What should I do if my minor child’s information is involved in the incident?
You can request that each of the three national credit reporting agencies perform a manual search for a minor’s Social
Security number to determine if there is an associated credit report. Copies of identifying information for the minor and
parent/guardian may be required, including birth or adoption certificate, Social Security card and government issued
identification card. If a credit report exists, you should request a copy of the report and immediately report any fraudulent
accounts to the credit reporting agency. You can also report any misuse of a minor’s information to the FTC at
https://www.identitytheft.gov/. For more information about Child Identity Theft and instructions for requesting a manual
Social Security number search, visit the FTC website: https://www.consumer.ftc.gov/articles/0040-child-identity-theft.
Contact information for the three national credit reporting agencies may be found above.
