A Notice to Our ParticipantsWe are committed to protecting the confidentiality and security of our participants’ information. Regrettably, this notice is to inform our participants of an incident involving some of that information.
On December 17, 2018, we learned that an unauthorized person had gained access to an SJCS employee’s email account. We immediately secured the account, began an investigation, and engaged a leading cyber security firm to assist with the investigation. On January 10, 2019, the investigation determined that other SJCS employee accounts had also been accessed by an unauthorized person as early as October 11, 2018. The investigation determined that some participant information was contained in the accounts, which may have included participants’ names, addresses, dates of birth, social security numbers, medical conditions, and treatment information. If a participant’s finances, bank account, and/or financial benefits are administered by SJCS, the email accounts may have also included their bank account number and/or debit card number.
We have no indication that any participants’ information has been misused in any way. We mailed letters to current and former participants on February 8, 2019 and are offering them a complimentary one-year membership for credit monitoring and identity protection services. More information on this product, including instructions on how to activate it, are included in the letter mailed to participants. We have established a dedicated call center to answer any questions our participants may have. If you believe you were affected and do not receive a letter by February 15, 2019, please call 1-877-363-7804, Monday through Friday, 9:00 a.m. to 9:00 p.m. Eastern Time.
We deeply regret any inconvenience or concern this may cause our participants and their families. To help prevent something like this from happening in the future, we are implementing additional security enhancements and providing additional education and training to our employees.