What to Do in the Event of a Data Breach
North Carolina Attorney General Roy Cooper recently gave a presentation on the “alarming rate” at which citizens of Charlotte and the state are falling victim to identity theft. To date in 2015, more than 1.1 million North Carolina residents have been affected by data breaches where criminals had access to their personal information.
Because of the prevalence of this problem, data compromises are sadly becoming less of a question of “if” but rather “when.” Businesses and individuals should take measures to prevent information breaches from common access avenues, but they should also develop a plan for addressing a breach should one occur.
Legal Obligation for Charlotte Businesses Affected by a Data Breach
Per the North Carolina Identity Theft Protection Act, all businesses must notify customers, employees or peripheral individuals like former applicants without “unreasonable delay.” This notification must include:
- A general description of the incident
- The type of personal information that was accessed
- A general description of the efforts to avoid further unauthorized access
- Contact details so the recipient can obtain ongoing information
- Advice for follow up measures that individual should take to monitor access or use of their information
Affected businesses must also release details of the incident to the NC Attorney General’s Consumer Protection Division and the three major credit reporting agencies.
How Charlotte Businesses Should Respond to a Data Breach
Credit reporting bureau Experian provides advice for how businesses can respond in the immediate aftermath of discovering there has been a data breach:
- Make note of the date and time of when the breach was discovered and begin tracking dates and times for response efforts
- Alert top-level management, owners and related department heads
- If the data breach could have been the result of physical access, secure the premises around all accessible computer stations
- Disconnect all affected systems from your company network and the internet. Do not turn these systems off
- Document as much as you can about what is known regarding the incident as well as the timeline of discovery
- Supplement your documentation with recorded interviews or written statements
- Assess priorities and top risks
- Notify law enforcement of the incident. Provide them any materials you have
- Work with law enforcement or an outside forensic team to learn as much as you can about the incident along with who or what was affected
- Begin your notification efforts by documenting the names and information type of affected parties
Once data access has been limited and as much evidence as possible is gathered, businesses can recover by redoubling their efforts to reduce the risk of further data breaches. Law enforcement or your forensic computing team can approve for you to begin deleting or destroying unneeded stored information following the incident to prevent further unwanted access.
What People Are Saying About PROSHRED®
Thank you, Pro Shred, Charlotte, NC. This has been an awesome experience. You guys were great to work with from beginning to end. We must... read moreThank you, Pro Shred, Charlotte, NC. This has been an awesome experience. You guys were great to work with from beginning to end. We must get the word out to our church members, their friends and family that you are not only the first choice, but the only choice for their shredding needs. Thank you so much!!!! read less
Emmanuel Baptist4/19/2018Convenient location. $10 per banker's box full of paper. Price seems fair to me. However, the lady that helped me was rushed and unfriendly... read moreConvenient location. $10 per banker's box full of paper. Price seems fair to me. However, the lady that helped me was rushed and unfriendly and promised to send the destruction certificate once the printer was working again, but didn't. I don't like it when people don't follow through. Have used them twice in a year and I recommend them. read less
Sonia Perez9/10/2019We feel very safe in using ProShred to destroy private business documents. This comfort level comes with seeing same employee come each month to... read moreWe feel very safe in using ProShred to destroy private business documents. This comfort level comes with seeing same employee come each month to service our account since signing on years ago. He is always courteous, knowledgable, professional and happy! Tracy Curran, President J. J. Curran & Son, Inc. read less
Tracy4/27/2017Working with proshred was quick and easy.
Brian9/24/2019Haney did everything he promised, both in emails and on phone. George showed up on time,( a rarity in Charlotte), with a smile, explained... read moreHaney did everything he promised, both in emails and on phone. George showed up on time,( a rarity in Charlotte), with a smile, explained everything he was going to do and allowed us to watch him do the job. Excellent service at a very fair price. read less
Jim Strickland7/24/2019What a great service! They scheduled a two hour window, called the day before to confirm it, called when they were on their way and... read moreWhat a great service! They scheduled a two hour window, called the day before to confirm it, called when they were on their way and arrived 10 minutes later. The shredding was quick and easy. The tech they sent was SO nice! Courteous, efficient, helpful and accommodating. In fact he was so great I wrote this to the company, “I just wanted to let you know I was DELIGHTED by the service tech you sent to do my shredding. If there were more people like him in the world it would be a better place. A way way way better place. Please tell him thank you for me, I really enjoyed working with your company and and will recommend you in the future to any one who asks.” So, yeah, I highly recommend Proshred! read less
Kim Stump1/27/2018I needed to clear out some old filing and paperwork that would be too much work for a personal shredder, so I called Proshed and... read moreI needed to clear out some old filing and paperwork that would be too much work for a personal shredder, so I called Proshed and the salesperson (Greg) was great and set me up right away. Great service and guidance and I will use them again. read less
R Mitchell10/01/2018
