Notice of data security event

Español

The Texas Department of Insurance, Division of Workers’ Compensation (DWC), through First Watch, notified system participants in writing about a recent security event that may affect their personal information. This notice describes the event, our responses to the event, and resources to help affected parties protect their information. This event and the security of information are being taken seriously. There is no reason to believe that any of the information has been compromised or accessed by unauthorized individuals.

What happened?

• On February 22, 2024, DWC became aware that an external hard drive used for data backup was missing.
• The external hard drive was on a secure floor that requires approved security clearance to enter the building.
• Again, there is no reason to believe the information on the external hard drive has been compromised or accessed by unauthorized individuals.

What information is involved?

This external hard drive contained information concerning disputes about payments for medical bills. Information within these files might include names, addresses, date of birth, phone numbers, claim numbers, partial or full Social Security numbers, information about injuries and workers’ compensation claims, and medical records.

What steps have been taken?

• We conducted a thorough investigation of this matter and are taking comprehensive steps to locate the external hard drive.
• We are taking necessary steps to mitigate this issue moving forward.
• We reviewed and enhanced our security protocols to prevent such incidents from happening again.
• We are offering credit-monitoring and identity-protection services at no cost to those who may be affected for 12 months. These services include fraud consultation and identity theft restoration. To learn how to get these services, see the “Credit monitoring and guidance” document included with this letter.

What you can do.

Affected parties may enroll in credit-monitoring and identity-protection services. DWC is covering the cost of these services for 12 months.

We also encourage you to stay alert for errors, suspicious activity, and identity theft and fraud by reviewing your account statements and monitoring your credit report.

Questions?

If you have any questions, customer service agents are ready to assist you at 1-888-841-3225.

Credit monitoring and guidance

Monitor your accounts.

1. Ask for a free credit report:

2. Place a fraud alert on a credit file:

You can place an initial or extended “fraud alert” on a credit file for free. To do this, contact one of the three major credit reporting bureaus listed below.

3. Place a credit freeze on your credit report:

Instead of a fraud alert, you can ask credit reporting bureaus to place a “credit freeze” on your report. This will mean the credit reporting bureau can’t give out your personal and financial information without you agreeing to it. Under U.S. law, you can’t be charged to place or remove a credit freeze on your credit report.

Note: A credit freeze may delay, interfere with, or not allow timely approval of a request or application for a:

To ask for a credit freeze, you will need to give the three major credit reporting bureaus:

More information.

To learn more about identity theft, fraud alerts, credit freezes, and the steps you can take to protect your personal information, contact:

• A credit reporting bureau: See the last page of this letter for the websites and contact information for the three major credit reporting bureaus.
• The Federal Trade Commission (FTC): If your information has been misused, the FTC encourages you to file a complaint with them. To learn how or get more information about other steps you can take, go to IdentityTheft.gov or contact the FTC at:

600 Pennsylvania Avenue NW 
Washington, DC 20580 
1-877-ID-THEFT (1-877-438-4338)

Teletypewriter (for hearing impaired): 1-866-653-4261

• Your local police department: You should file a police report if you experience identity theft or fraud, or suspect identity theft. To file a report, you will likely need to give some proof that you have been a victim.
• Your state’s attorney general.

The three major credit reporting bureaus