Page Ameriprise Flnancl I.InC. Amerip IseQ W 'Longl.aKe Flo, SUltO 2'01 .

Transcription

Dec 21 2016 10:46AM HP FaxAmeriprise Flnancl I.InC.1441 W 'Long l.aKe flo, SUltO 2'01::1Troy. MI 4oo9Bpage2QAmerip iseFinancialDecember 21, 2016Office of the Attorney GeneralConsumer Protection and Antitrust Bureau33 Capital Street'Concord, NH 03301Fax: (603) 271.2110Re: !nf()!tl\l:\tiol\ Security Btee,cll. Noti.f\.ce.ticmDear Sir or Madam:This letter is for the purpose of notifying your office that Ameriprise Financial Services, Inc. hada data breach incioent involving "information for (3) Ameriprise clients who me te&iden\sofNew Hampshire. Specifically, on December 6, 2016, it was discovered that an external harddrive ttlaintained bya franchise advisor's office was accessible via the internet. lbis was anisolated incident pertaining only to infonnation this advisor maintained.The hard drivecontained back-ups of financial documents, including names, addresses, dates of birth, accoUntand Social Security nwnbers. While the information was not easily accessible and would requirea person to search specifically for the port that contained the hard drive, it was immediatelytaken offline upon discovery.After this letter was sent to your office, Ameriprise Financial also sent a notification letter to theaffected residents, a copy of which is enclosed. The letter describes steps Ameriprise Financialis taking to help ensure that these individuals' accounts are not accessed by unauthorized personsand provides them with an opportunity to enroll for one year of credit monitoring from Equifax,at Ameriprise Financial's expense.In addition, we have included a copy of a brochurecontaining information about how to protect against identity theft.lfyou have any questions regarding this incident, please ContaClme at (248) 205-5817.Sinc7 1. '.".,.c.J::j,.4'T1/;:-:"' .'jla 'J .cdi1L.b-o-dKatWeen A. DedenbachVice President & Group CounselChief Privacy OfficerGeneral Counsel's OrganizationAmeriprise Financial, Inc.KAD:jawEnclosures

Dec 21 201610:46AMHP Faxpage 31632 ClientlDAmeripriseeFinancia,l«MailDv.e»«First Name «Last Name»«CHent Address 1»«City», ST» ZIP».Dear«FirstName» Last Name»:1am writing to make you aware of an incident involving your personal infonnation. On December 6, 2016, it was discovered that anb.,.m ffir.eW@''b 'S\)tb.ie '(Va.tl;v:.m .This \'I . iwt a.ted iM.V1-t.n.\ t\m% .,.tJ,}information I maintained. The hard drive contained 'back-ups of financial documents .including names, addresses, dates of\)irtb. andaccount ancJ Social Security numbers. While the information was not easily accessible and would require a person to searchspecifically for the pan that contained the hard drive, we immediately took it offline upon discovering the issue. \ nw.\ \w.rd dri'l m. ta\n We take the security of your information very seriously and apologize for this incident. We have taken steps to protect your accountsfrom unauthorized activity, including instructing out service associates to use elara caution when verifying callers and to confinn thesignature on written requests related to your accoun .As a precaution, Ameriprise financial is also providing you an opportunity to enroll in an Independently operated credit monitoringprogram for one year at no expense to you. This program is administered by Equifax, ()ne of the three national credit reportingagencies. Equifax Credit Watch will provide you with an "early warning s)'stem" which alertS you to any changes to your credit file.The last page of this letter includes the features of the Equifax Service and the promotional code you need to use to enroJl for one freeyear of coverage.I recommend you take the following actions 10 help protect against the potential misuse of your personal information such as:Thoroughly review your account statements and transaction conftrmations.-Reviewany solicimtions you receive in the near future.Closely monitor all of your personal accounts (e.g. checking and savings, credit cards, etc) to make sure there is nounauthorized activity. Read the enclosed educational brochure whk,h provides resources andmeasutes to help protect against identity theft. Be vigilant if you receive a call from someone who claims to represent Ameriprise Financial. lfyou have any doubts aboutthe caller, hang up aDd call me to verify the validity of the call.In the event that YOIl experience fraud or theft asa direct result of this situation. please call the Ameriprise Financial SuspiciousActivity Hotline immediately at (800) 862-79 J 9. EKt. 11208 to speak with a fraud investigator.If you have any questions. please do not hesitate to contact me at ( 08) 775-2399. Please accept my sincere apology regarding thissituation and any inconvenience it may cause you.Sincerely.John PupaFinancial AdvisorEnclosure: Ameriprise Financial Identity Theft Brochure

Dec21 201610:46AM HP Faxpage4EctUIFAX4r!ActivationAbout the Egu!fax Credit Watch-Equifax Credit Watch provides you with the following keyfeatures and benefits:o Comprehenslve credit flle monitoring and automatedalerts of key changes to your Equlfax, Experlan, andG'old with 3-in-1f Monitorlnll identity theft protection product!.Equifax Credit Watch will providewarningUsystemyou with an "earlyto changes to your credit file and help youto understand the content of your credit flIe at the threeTransUnlona credit fileIn order to take advantageof thecredit reportsoWireless alerts and customizable alerts availableoOne 3-In-1 Credit Report and access to your Equifaxmajor credit-reporting agencies. Note: You must be oller age18 withCode:INSEJtT Cftdit MonltorlqCode(availableproduct.online only)Credit ReportftOoUp to 1 million in identity theft insurance1with 0deductIble, at no additional cost to youLHow to i.nro'd YonCtIU To sign up online for onlineo90 day Fraud Alert 2 placement with automaticfunctionality- (available online on )inaccurate Information.ouful'cdeliveryOJ' m tbeTo sign up for US Mall delivery,diaI1-866-937-1l4321.process. Note that all credit reportsto you via US Mail only.Welcome Page: Enter the Activation Code provided litthe top of this page In the "Activation Code" box andbutton.Register: Completetheformwithyourcontactinformation lname, gender, home address, date of birth,Sodal Security Number and telephone number) and clickthe "Continue"3.to accept the Terms ofbutton.: 4.Verify 10: The systemsecurity5.questionsUse2.will then ask you up to fourPlease answerthe questions and clickthe "Submit Order" button.Order ConfirmatIon:This page shows you yourcompleted enrollment.Please dick the "View MyL. t"buuon toa""",,he.,ad." fea.,esand alerts will be sentCustomerInformation:You will be asked to enter yourhome telephone number, home address, name, dateof birth and Social Security Number.3.Permissible Purpose: You will be asked to provideEqulfax with your permissionand click the "Continue"to verify your identity.forenrollment1. Activation Code: You will be asked to enter yourenrollment code as provided at the top of this letter.button.Create Account: Complete the form with your emailaddresos, create a User Name and Password, check thebOl(renewalout:go toaccess to the Equifax Credit Watch automatedclick the "Submlr-t24 by 7 live agent Customer service to assist you inunderstanding the content of your Equlfax creditInformation, to provide personalized Identity theftvictim asSistance and In Initiatine an Investigation ofwww.mysgrvic,es.eguifax.com/ttl2.Io4.to access your credit fileand to monitoryour file.WithoutEquifax cannotprocess your enrollment.your agreement,Order Confirmation: Equifax will provide aconfirmationnumberreceive your Fulfillmentwith an explanationthat you wlllKit via the US Mail (whenEquifax is able to verify your Identity)or a CustomerCare letter with further instructions (If your identityca n not be verified using the information provided).Please allow up to 10 business days to receive thisinformation.Directions for p1acinli a Fraud AlertA fraud alert is a consumer statement added to your credit report. This statement alerts creditors of possible fraudulent activity withinyour report as well as requests that they contact you prior to establishing any accounts in your name. Once tile fraud alert is added toyour credit report, all creditors should contact you prior to establishing any account in your name. To place a mud alert on yourcredit file, visit: www.fraudalerts.eqyifax.comor you may contact the Equifax auto fraud line at 1-877-478-7625. and follow thesimple prompts. Once the fraud alert bas been placed with Equifllx, a notification wit! be sent to the other two credit reportingagencies, Experian and Trans Union. on your behalf.1 - Idcn ily Theil ,-""UIld wwriltenby inmnonce oompany cub"':diaries or affiliatec of American lntol1lAliOlllI Croup. Ino. The description herein iI a AlIlIlrlU)' IIJ:Id ill1l1 llkd forinfOl1llal1anal PIIIJlO6l'I ooly ""d dQos col melude all « Odilia". BOd lWlIusi of the ""lieios d.eso:n1 ed. Please reftsr 10 !be ac!lllt ""Uoios fur mm iticma,aad exx:huiQlll oftovenge CO-"1lC mil)' not he aVlUlabl. in ell jllrisdietiolla. Thi. ,,",duct iA1lO11l1l.nclcdfor minon;18 yon of -eo)2 - The Automlltio Fraud Alert foat . mlUie . ilablc 10 000"''',,,by Equifu [nror-lioll SeMeO! LLC and flJlfillod on ils beh.lf by Equifax Concu:mar Servi LLC

oIII" NNgC1IAnteripriseHow does identity theft happen?Resources You can fiM rescurt:es and 'mannal'''''hlm go-.emment agencJeS abOut nr.11181 ean 1! lId to iOen1lty !heft.Dwl1\lSt8tDivingRummagii\l thlQl J l1a5/llool ing lOr billS or otl1eI,locurnems wttJl personal irlfofmatlon - roUt "aroo,addre&s, phOtlo ""miler, wiRy semce aa:oorTtnumbers, credit card numbers and YI'V' SocialSe ttA-ity number."PflIshlngPIlcne c6113. parn en1liIS or pOIHlp. messageswhere criminals impersmate linanclallnstnutioru;O(oompanlfts to IletWlllle you Ipersonalc/nlOOnabon Fole.a"'fJl8:"",mlly ieceiWaii ;lasldnl! routo "update" 0 "coofirm- your info mation"nd direct you to a lIo'ellsite that IOCf SIdeoticallo 1heleg!timatll organjzalion's. site. The phishing,sne IS a/lhony site desillne lto trick rouintodiouillingyo"rjlefSOn/li1 ,tIformatim so 1he oper.ltors can steal rout!denllty.If you beliE!'te a massagR to be Iilishilll. forwardit 10 ll!iJIT1'liluce.l\D' and tt1e legllim8te company1fJ1 In the email. Fa any "'fIShing email.'ll1jle MOOIIllf1se Aoaneial.pleasemeSSilll" to anti.!r.audli%lmpt.llOl!l. ;end your;JlxTTY U!B6.6!lo3.4261onGuant 0lIIIIlawell: onguatdonfone.pPitWiIC, R1 caW" cWeb: .olf!I'hone: 619298.3396US PDatal. 1Bspectlon. Servlceweb: usps.oom/pllSlaU Phone: 1.&7'1'.816.2455.:,.USs-et .Senti:.Web: rvict:.gO ocIlIII llecUlfty AcImI web: "'!l-S38.govl't1clnWrau ll1oGit e: 1000atcaRit.gor sooding 4'I\iI' \hat attempt to trick you lIDte ealil ;g persooalln1ormalion. fOl' example,someone calls ore1enomg lD oII'!!r you aJob lllllla1lk., l'ar )OUr PGi'SOl1al informatiOn, such as yourSaoal number, to sec if you - Illy" for meposition. It businesslly1)TrIIde web: ftc.llOV/ld\tlellPhone: 1.877.1CHHEFi (438.4338)?f!fI.D271 ' ociat The miSl.iSllus ao-lIl8Ilt 1l1fOI'matIoIl.8IlId 8rVICMWet :usapPbone:1.844;872.4681kieBtJty lIl8ft RIillOIln:l8 CenterI Reducel.rour S. k ofIdentity theft :lcIlhefll:e!1l.er.orgPhone: 1.008.400.5530.Tti8ItStooUng or f!t1(lil1i los! wallets and purses, as welt asmail .soclr U 00IlI( alia credlt cam sta\m1entll,Pl&aP\lrolled credit offat1l; f l. .orllll\Inform!lllon. ThlevilSmay alsofty bu medlcal offices. or llCWlTltrel1l ngCndes, ant! steal1nftlnnatkJl on !he j(b. :r:onllr1p. linnand OOmesI'elIemoreFill/meial9.j:oC1Ie---"I-I I . --- --,--------------.Alhwlpt'lloe Fl!tlMei9l (1Vl.oes,!no.T'.J8 Amtrill'l'lIlo FiRIiInciaJI6:nw.Yi 1lM(.t5fi.4t4 ".eomC 20H-101a iMI'lloncilll;Ino:111.il!I1"" """""'".2erel@ K ((;4{16)1l ur

oIII" NgO'lAmeripriseProtect your identity1lIIep)'IIMIrI "oIvat Before disclosings, PMlCool infonnatloo. ensure\'OU ! now it isDorl' lestIOndto emal.text 0( phone""'Mafl"" ll1irt ask fO( jlefSOn3i inlO,"""loo.Legt'mate companies don' ask lOr InformationIllis wuy. Delete t"ie message.0 ,.,gill !Soclal5el:llrityOfRequesllO !lI!f!a ptNlll:y 1lO1 A le itimalebusno,. ,equestingyou' Sodei Security nurrt e secure websites tan be rocttnired by \he prelhhttp&:/I SOO8 pudlod lCOOinW &latUs bar ofshould have a jlIivacy poVey eJ\plainil1C 't1YpenJonel inlol'Mlltion 19oolooed.1low It's ur.ed.\heand who wiN hiM! accessinforfnatior1 ant:J number' .00For example.car(\ """,ilta. billing 6talnmentscreditpre.anClaPl'ftl!'lld credit oilers sl ould b& shredcled)'tlU d'lSCaro them.befu eSafecuatlIjIQlIr '-'1hIt. Promptly r'erTl IYe"'911 from '/OOf mallbo. or consider aOIilgpilg mail In pelslcollectloo bo.,s.incominglocking lTlOlilbcl. and pia u1'""c.,. My lIIe 1ItiIIIa. 00 not carryext'" credteards.)OUI birthsecuritycertificate. 8SSllO't Of your Socialcaod with)CU. eocept """"--:row.- necessary.The1 ' " 111 111 major cl'edil btl eaus- E jjax. F.q et'ian aldTransUnm-\J)pr1)'V!de a free CO\ll' of your Cfe(J report Of1ceper r.-an port.oomor can.l.877 .322.8228 to O(der your free creditVISI1"'portS-eIlClll'llllr.Contactone of ltla""'IIIB':lhat a -fraud a!aft"major o:te.dlt bureausis pIacOdmakingchangesto )CUr el islireII you o'soo"enj"n .".,meone has used yourpcm;uoal infor".,atil:A1 to open ilCCOOnts 0/' pUrsueUnAlIliuI:redP.O 9t5t,",.ElI"""your . i:;lftl,cIu1'llcters)'OUr 1f Th"",me edlJCBtiOnalIf yOu suspect or encOuAleractMty 00 your Amel'ipriseJIM atat.Mnb. Catefully end promptlyaIrY urtauthOflzedFimneitll aca unts.call yOOf Ifinancial aclvi50r Of contactCllI",l SerW:e at 1.aoo.862.79 '1.report as prod of IIle 1t1eft.Seek 1IlIIHThe FTChas anide rtityth lt infannalion packet to assist victim .ReQIte st a Pa *et 31the col1Ulet Ollli""" belyOUl' routiMli.llow .\11\dipri !'FinancialprolCt'ts YO:l!' inionnatioll'\1'-'1)[,1'rF,o] ,;1!:"J:::IIlIIlIl'lUnauthorizeO C1l3Illll&00 your banll, tnldit eani or;' .Mistakes on the 8tiOnfrom j )IK hOOlt!l pian'lbtw regular bills aMaccountUfl'i'leootineOf senoioesco!IectDrs abolt det l:s I!Iat don'tYouare turned mwn u for a !Oiln Of ill jcb ;,'jF1.llr .;:'hl,l n{1 :'" I ' '.H,"t('rl:,'!.',R'11"1r)Y;;,",'1 1or collection ootices lIor IIftllb;tslOU never receivedIllllslleIO 1g to l'OOC'.d tt,." .,don't''tiin( j,'": .ti"l. . "of medical beftelils9L1UmenlS13\0sltell, ,ncl Red flags of identity theftn.- """ thor .,. 10 FedenIComm (F'lC1. YOIr leport will aid lawen1orcemef\l O1'licials across tile COUI\tIy in1tIeIr IrwesllgatOlS.Pho e: 1. 11.Il).lHEFT.-.amenpr1se.oom.Of.UtM U1epersroal irtlnmtMiln lOU malQ! publicaboutConSiderreport. !dent!tv T1leltis 8 climewet :ft :.l'I"/l IheftCalls rmm debttlf'ICOlJnter B Unlluthorized BdM1;t on yourt0021materials i!buut many 01the oniine scams aton llOCial.-t.aM most c1OOItofS rE!qJire a law el1toreemern oo ne.gov.abOUt leaVing for vaClltJQII QI infc maliooCflIIIItse",iee.Co8tact ,. ot I\nanr:taI N1ItutIons.mll'f bI' lIble to f)lOIIiOO add'l\iooalsecurityme-asur III lICCill61t.Close ""'Iaoccunts )IIlU susPlld: are frauQJent or haI.efie poke Jand numberS.Use lirewalls, aflti.Sl'VMYe and llfIti.\III"" softwareto protect l'O'Jf horoo oompuler aM ret(ulBrlrut dote these progt;lmS.l:dUClltePA,.,r 2BNdW'nPl:ACeletters. xfraudulentI elions.'.'P.O ll l .1\00nM passwords.numb! ,s (PINs) u :5l.l1.lP9HI .".l.- .Crea1E unique pa5swortb aod identiriCalKllllittH;.jf1'1l-pt'nBf' ,C't ril ::I:-0The)'AlIm.l')(7 t:lCl! ll8f Of airports. These ere P'u"" tar et areasInr thilWes vs; 1 l!ys\ro4cemonilllrir« tools to."""PIacB 8a credit """,bog" actM!Y:Coo1tKt lftlA lIwMIl. Inlorm me of tiletI1ree lT1i:ljOf credit bureaus that \'OU aAl a ;ctimci identity tneft.ai'OOUnts.P.O. 80, 740241Atlanta, GA 30374(800) 525-6295tiCiLifauomWOO llIUW'sef.review all tlal\sactlon confirlilations. accountstatements and """,Its. srlrreYIew yourua:ounlls) by toegIrg inti) tJ'!& S lC\lre site at1f)'OU suspeaBn lyour le.00ne alert inslnJcts cre6t rs to ""rtIY j'OlJI identityvia li'IMe before openjng 3"1' new aocoonts oracoounlsConsider ringYO" credtt Ie?O't requestsfrom ea.;h "llenqo 1I1l'(l t!'Ht rear. tool furJnqulr1es arod aetJvit on )'OUf ac lOUI'ItS tIIl1t )'OUeart1"plein. inronnation is lost or stolen"" lid lll:CE'Ssing r financial accounts onlinefrom public CM1JXJ1ersall I"". "l ""sinessto .Dest., old doe ShIed inrofmation Ion",. .-d thaI tOOle,ns per 1yidentifiable Be ." of any unsototea ernaj lInll oneill t/1!Itseem too goo !to be We. Ne click on a lin sent in an unsdlcltOO emai!.What to do if you are the victimof identity theftWhat to do if your personalUse anlr secure """bsites WIlen "merill:ll@I'90nal inlbrmat"",or mela"l! online putdlaoos.do nat \,,,,,,,,.)'OUcall )'OUr personalIf you "'e 10 doubt. cIon't reply Call the insliWtionMa number.1IU1IIber. 00 natyoor Social Security nember l.O companies6CCOlI!1t!;.Protect yourself onlinerequired aM how ",II be used. Financialfinancial oo-i lr or 'COOtact Client SeI'A"" at1.800.862.1919.,') ,"i't ,': lla.; /"','.';(1'l!'{, f,'Nrmil.jl'!('CIIli-lT I":'D',.'::o.I!III(438.4338]or ffl' 1.866.653.4261F1Ie wilh 'fIlIII "'-eatriKCheck yoU poley or camet to mine )'OU haIoe lhfltt In5llranca p Oleclion. IIllPPllc atE, Wlskler filing s claim :oIlIaoI& Start a lilectDdit "'tXlrls. 'lhepdicle fSIXlI1. ""pies of lisPUted bib andl'Il\I cmesjlOnlB'oo.Keep " log of )'OUt""""",rslltiQnSC ltors, law enfccoc:emenloffieitll" ar'd oth81 ra!.vant p:lrtles. follow UP all-.with -"tileop;e; 01 phorle cal' i. writng and send correspondenrevia certified mail. tetlin recollll 'lKluested.O'l

Financial This letter isfor the purpose ofnotifying your office that Ameriprise Financial Services, Inc. had a databreach incioent involving"information for (3) Ameriprise clients who me te&iden\sof New Hampshire. Specifically, on December 6, 2016, it was discovered that an external hard