Whatcom County Library System Provides Notice of Data Event

Bellingham, WA – July 21, 2022. Whatcom County Library System (WCLS) provides notice of a data event.

What Happened? On June 26, 2022, WCLS identified unusual activity on its computer network. In response, WCLS is investigating the activity to determine its nature and scope. Although the investigation remains ongoing, WCLS identified certain files that were downloaded by an unknown actor. WCLS reviewed the files and provided written notice to the individuals identified during the review of those files.

What Information Was Involved? WCLS identified that some patron names, date of birth, and barcode and PINs were in the downloaded files.

What WCLS Is Doing. WCLS takes this event and the security of information in its care seriously. WCLS automatically updated the PINs for the identified patrons’ library services accounts and issued written notices. Further, as part of WCLS’s ongoing commitment to the privacy of information in its care, WCLS is implementing additional technical security measures designed to mitigate reoccurrence of this type of event. WCLS is also reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event.

What Individuals Can Do. WCLS encourages individuals to remain vigilant against incidents of identity theft and fraud, and to review their account statements and free credit reports for suspicious activity and to detect errors. Out of an abundance of caution, you may wish to update your library PIN by reviewing the “Updating Your Library PIN” section below. Additionally, you may wish to review the “Steps Individuals Can Take to Help Protect Personal Information” section below.

For More Information. Should individuals have questions, they may email us at alert@wcls.org. You may also write to WCLS at Whatcom County Library System, Attn: Network Security Event, 5205 Northwest Drive, Bellingham, WA 98226.

We regret any inconvenience or concern this event may have caused. We remain committed to safeguarding the information in our care.

Sincerely,

Whatcom County Library System


UPDATING YOUR LIBRARY PIN

If you know your PIN and want to update it:

  1. Go to https://wcls.org/pinreset
  2. In the upper right corner of the page, click Log In. 
  3. Enter your barcode and PIN, and click Log In. 
  4. On the left menu, click My Record, and then click Change Logon. 
  5. Select the Change Password checkbox, enter your temporary PIN, and then enter a new PIN or password in the New Password and Verification fields. Click Save. 
  6. In the upper right corner of the page, click Log Out. 

If you don’t remember your PIN: 

  1. Go to https://wcls.org/pinreset 
  2. In the upper right corner of the page, click Log In. 
  3. Click Forgot your password? 
  4. Enter your library account barcode and click Submit. 
  5. Check your email account for a message with the subject “Reset Password Request.” It may appear in your junk mail folder. 
  6. Click the Reset Password link in the email and then enter a new PIN or password for your library account and click Submit. 



STEPS INDIVIDUALS CAN TAKE TO HELP PROTECT PERSONAL INFORMATION

Monitor Relevant Accounts

Under U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax, Experian, and TransUnion. To order a free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. Individuals may also directly contact the three major credit reporting bureaus listed below to request a free copy of their credit report.

Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If an individual is a victim of identity theft, the individual is entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should an individual wish to place a fraud alert, the individual may contact any one of the three major credit reporting bureaus listed below.

As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in an individual’s name without consent. However, individuals should be aware that using a credit freeze to take control over who gets access to the personal and financial information in their credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application they make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, individuals cannot be charged to place or lift a credit freeze on their credit report. To request a security freeze, individuals may need to provide some or all of the following information:

  1. Full name (including middle initial as well as Jr., Sr., II, III, etc.);
  2. Social Security number;
  3. Date of birth;
  4. Addresses for the prior two to five years;
  5. Proof of current address, such as a current utility bill or telephone bill;
  6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, etc.); and
  7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if an individual is a victim of identity theft.

Should an individual wish to place a credit freeze, please contact the three major credit reporting bureaus listed below:

Equifax

https://www.equifax.com/personal/credit-report-services

888-298-0045

Equifax Fraud Alert, P.O. Box 105069
Atlanta, GA 30348-5069

Equifax Credit Freeze, P.O. Box 105788 Atlanta, GA 30348-5788

Experian

https://www.experian.com/help/

888-397-3742

Experian Fraud Alert, P.O. Box 9554, Allen, TX 75013

Experian Credit Freeze, P.O. Box 9554, Allen, TX 75013

TransUnion

https://www.transunion.com/credit-help

833-395-6938

TransUnion Fraud Alert, P.O. Box 2000, Chester, PA 19016

TransUnion Credit Freeze, P.O. Box 160, Woodlyn, PA 19094

Additional Information

Individuals may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps they can take to protect their personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Individuals can obtain further information on how to file such a complaint by way of the contact information listed above. Individuals have the right to file a police report if they ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, individuals will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and state Attorney General.


Steps Individuals Can Take to Help Protect Their Minor’s Information

Monitor Minor’s Relevant Accounts

Typically, credit reporting agencies do not have a credit report in a minor’s name. To find out if a minor has a credit report or to request a manual search for a minor’s Social Security number, each credit bureau has its own process. To learn more about these processes or request these services, individuals may contact the credit bureaus by phone or in writing or visit the below websites:

Equifax

https://www.equifax.com/personal/education/identity-theft/child-identity-theft/

888-298-0045
P.O. Box 105788
Atlanta, GA 30348-5788

Experian

www.experian.com/fraud/form-minor-child.html

888-397-3742

P.O. Box 9554 Allen, TX 75013

TransUnion

https://www.transunion.com/fraud-victim-resources

833-395-6938

P.O. Box 160 Woodlyn, PA 19094

To request information about the existence of a credit file in a minor’s name, search for a minor’s Social Security number, place a security freeze on a minor’s credit file, place a fraud alert on a minor’s credit report (if one exists), or request a copy of a minor’s credit report individuals may be required to provide some or all of the following information:

  • A copy of the requesting individual’s driver’s license or another government issued identification card, such as a state identification card, etc.;
  • Proof of address, such as a copy of a bank statement, utility bill, insurance statement, etc.;
  • A copy of the minor’s birth certificate;
  • A copy of the minor’s Social Security card;
  • The minor’s full name, including middle initial and generation, such as JR, SR, II, III, etc.;
  • The minor’s date of birth; and
  • The minor’s previous addresses for the past two years.

Additional Information

Individuals may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps individuals can take to protect personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Individuals can obtain further information on how to file such a complaint by way of the contact information listed above. Individuals and/or their minors have the right to file a police report if their minor ever experiences identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, individuals or their minor will likely need to provide some proof that their minor has been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and state Attorney General.