Transcription

Date (Format: Month Day, Year) first name middle name last name suffix address 1 address 2 city , state province postal code country b2b text 1 (Notice of Data Breach) Dear first name middle name last name suffix ,Horizon Actuarial Services, LLC (Horizon Actuarial) is writing to make you aware of a data privacy incident that may affect the privacyof some of your information. Horizon Actuarial provides technical and actuarial consulting services for benefit plans in the UnitedStates. You are receiving this letter because you or your family member are or were a participant in, or had contributions made onyour behalf to, the following benefit plan(s): b2b text 3 (Benefit Plan/Data Owner) b2b text 4 (Benefit Plan/Data Ownercont.) (the “Fund”). Information about you was provided by the Fund to Horizon Actuarial for business and compliance reasons.This letter provides details of the incident, our response, and resources available to you to help protect your information, shouldyou feel it is appropriate to do so. If you have any questions about this notice, please contact us at the number listed below under“For more information.” We ask that you direct your questions to that number and refrain from calling your Fund administrator.What Happened? On November 12, 2021, Horizon Actuarial received an email from a group claiming to have stolen copies ofpersonal data from its computer servers. Horizon Actuarial immediately initiated efforts to secure its computer servers and withthe assistance of third-party computer specialists, launched an investigation into the legitimacy of the claims in the email. HorizonActuarial also provided notice to the FBI. During the course of the investigation, Horizon Actuarial negotiated with and paid thegroup in exchange for an agreement that they would delete and not distribute or otherwise misuse the stolen information.The investigation revealed that two Horizon Actuarial computer servers were accessed without authorization for a limited period onNovember 10 and 11, 2021. The group provided a list of information they claimed to have stolen. On January 9, 2022, we determinedpotentially sensitive information was located in one of these files. We provided notice of the event to the Fund beginning on January28, 2022, and subsequently provided a list of affected individuals. Because you may have been impacted by the security incident,the Fund has authorized Horizon Actuarial to mail this letter to you.The Fund’s computers were not affected by the security incident. Your benefits have not been, and will not be, impacted by thesecurity incident.What Information Was Involved? Our investigation determined that the following types of information related to you may havebeen impacted: b2b text 2 (Impacted Data) .What We Are Doing. Horizon Actuarial takes this incident and the security of information in its care very seriously. Horizon Actuarial isreviewing its existing security policies and has implemented additional measures to further protect against similar incidents moving forward.We have arranged for you to activate, at no cost to you, identity monitoring services for 12 months provided by Kroll.Kroll is a global leader in risk mitigation and response, and their team has extensive experience helping people who have sustainedan unintentional exposure of confidential data. Your identity monitoring services include Credit Monitoring, 1 Million IdentityFraud Loss Reimbursement, Fraud Consultation, and Identity Theft Restoration.ELN-13656

Visit https://enroll.krollmonitoring.com to activate and take advantage of your identity monitoring services.You have until b2b text 6 (Activation Date) to activate your identity monitoring services.Membership Number: Membership Number s n For more information about Kroll and your Identity Monitoring services, you can visit info.krollmonitoring.com.If you prefer to activate these services offline and receive monitoring alerts via the US Postal Service, you may activate via Kroll’sautomated phone system by calling 1-888-653-0511, Monday through Friday, 8:00 a.m. to 5:30 p.m. Central time, excluding majorU.S. holidays. Please have your membership number located in your letter ready when calling. Please note that to activate monitoringservices, you will be required to provide your name, date of birth, and Social Security number through our automated phone system.Additional information describing Kroll’s services is included with this letter.What You Can Do. Horizon Actuarial encourages potentially impacted parties to activate the complimentary identity monitoringservices and remain vigilant against incidents of identity theft and fraud by reviewing account statements and monitoring noticesfrom their plans, including any Explanation of Benefits, and free credit reports for suspicious activity and to detect errors. Pleasealso review the information contained in the enclosed “Steps You Can Take to Help Protect Your Information.”For More Information. We understand that you may have questions about this incident that are not addressed in this letter. If youhave additional questions, please call us at (855) 541-3574, Monday through Friday, 8:00 a.m. to 5:30 p.m. Central Time, excludingmajor U.S. holidays, do not call your Fund Administrator. We take this incident very seriously and sincerely regret any inconvenienceor concern this incident may cause you.Sincerely,Mark K. LewisCOO/CFO

Steps You Can Take to Help Protect Your InformationACTIVATE YOUR IDENTITY MONITORINGYou have been provided with access to the following services from Kroll:Single Bureau Credit MonitoringYou will receive alerts when there are changes to your credit data—for instance, when a new line of credit is applied for in yourname. If you do not recognize the activity, you will have the option to call a Kroll fraud specialist, who will be able to help youdetermine if it is an indicator of identity theft. 1 Million Identity Fraud Loss ReimbursementReimburses you for out-of-pocket expenses totaling up to 1 million in covered legal costs and expenses for any one stolen identityevent. All coverage is subject to the conditions and exclusions in the policy.Fraud ConsultationYou have unlimited access to consultation with a Kroll fraud specialist. Support includes showing you the most effective ways toprotect your identity, explaining your rights and protections under the law, assistance with fraud alerts, and interpreting how personalinformation is accessed and used, including investigating suspicious activity that could be tied to an identity theft event.Identity Theft RestorationIf you become a victim of identity theft, an experienced Kroll licensed investigator will work on your behalf to resolve related issues.You will have access to a dedicated investigator who understands your issues and can do most of the work for you. Your investigatorwill be able to dig deep to uncover the scope of the identity theft, and then work to resolve it.Kroll’s activation website is only compatible with the current version or one version earlier of Chrome, Firefox, Safari and Edge.To receive credit services, you must be over the age of 18 and have established credit in the U.S., have a Social Security number in your name, and have aU.S. residential address associated with your credit file.MONITOR YOUR ACCOUNTSUnder U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax,Experian, and TransUnion. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-3228228. You mayalso directly contact the three major credit reporting bureaus listed below to request a free copy of your credit report.Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alertthat is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required totake steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to anextended fraud alert, which is a fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any one of thethree major credit reporting bureaus listed below.As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a creditbureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed toprevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that usinga credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interferewith, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, orany other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze onyour credit report. To request a security freeze, you will need to provide the following information:1. Full name (including middle initial as well as Jr., Sr., II, III, etc.);2. Social Security number;3. Date of birth;4. Addresses for the prior two to five years;5. Proof of current address, such as a current utility bill or telephone bill;6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification,etc.); and7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theftif you are a victim of identity theft.Should you wish to place a fraud alert or credit freeze, please contact the three major credit reporting bureaus listed below:

-888-298-00451-888-397-37421-833-395-6938Equifax Fraud Alert,P.O. Box 105069Atlanta, GA 30348-5069Experian Fraud Alert,P.O. Box 9554,Allen, TX 75013TransUnion Fraud Alert,P.O. Box 2000,Chester, PA 19016Equifax Credit Freeze,P.O. Box 105788Atlanta, GA 30348-5788Experian Credit Freeze,P.O. Box 9554,Allen, TX 75013TransUnion Credit Freeze,P.O. Box 160,Woodlyn, PA 19094You may further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect yourpersonal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or your state Attorney General.The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov;1877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover thattheir information has been misused to file a complaint with them. You can obtain further information on how to file such a complaintby way of the contact information listed above. You have the right to file a police report if you ever experience identity theft or fraud.Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof thatyou have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and your stateAttorney General. This notice has not been delayed by law enforcement.For District of Columbia residents, you can obtain information from the Federal Trade Commission and the Office of the District ofColumbia Attorney General about steps to take to avoid identity theft. You can contact the D.C. Attorney General: 441 4th St. NW#1100 Washington, D.C. 20001; 202-727-3400; and [email protected] Iowa Residents, state law advises to you to report any suspected identity theft to law enforcement or the Attorney General.For Maryland residents, you can obtain information from the Maryland Attorney General about steps that you can take to help preventidentity theft: 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; 1410-528-8662 or 1-888-743-0023; and www.oag.state.md.us.For Massachusetts residents, you have a right to request from us a copy of any police report filed in connection with this incident.If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it. As noted above, you alsohave the right to place a security freeze on your credit report at no charge.For New Mexico residents, you have rights pursuant to the Fair Credit Reporting Act, such as the right to be told if information in your creditfile has been used against you, the right to know what is in your credit file, the right to ask for your credit score, and the right to disputeincomplete or inaccurate information. Further, pursuant to the Fair Credit Reporting Act, the consumer reporting bureaus must correct ordelete inaccurate, incomplete, or unverifiable information; consumer reporting agencies may not report outdated negative information;access to your file is limited; you must give your consent for credit reports to be provided to employers; you may limit “prescreened” offersof credit and insurance you get based on information in your credit report; and you may seek damages from a violator. You may haveadditional rights under the Fair Credit Reporting Act not summarized here. Identity theft victims and active duty military personnel havespecific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review your rights pursuant to the Fair CreditReporting Act by visiting www.consumerfinance.gov/f/201504 cfpb summary your-rights-under-fcra.pdf, or by writing ConsumerResponse Center, Room 130-A, Federal Trade Commission, 600 Pennsylvania Ave. N.W., Washington, D.C. 20580.For New York residents, you may contact the following state agencies for information regarding security breach response and identitytheft prevention and protection information:New York Attorney General’s OfficeBureau of Internet and Technology(212) NYS Department of State’sDivision of Consumer Protection(800) or North Carolina residents, you can obtain information from the Federal Trade Commission and the North Carolina Office of theAttorney General about steps you can take to help prevent identity theft. You can contact the North Carolina Attorney General at:9001 Mail Service Center, Raleigh, NC 27699, 1-877-566-7226, www.ncdoj.gov.For Oregon residents, state laws advise you to report any suspected identity theft to law enforcement, as well as the Federal TradeCommission. You can contact the Oregon Attorney General at: Oregon Department of Justice, 1162 Court Street NE, Salem, OR97301-4096, (877) 877-9392, www.doj.state.or.us.For Rhode Island residents, the Rhode Island Attorney General may be reached at: 150 South Main Street, Providence, RI 02903;www.riag.ri.gov; and 1-401-274-4400. Under Rhode Island law, you have the right to obtain information about steps you can take tohelp prevent identity theft and a copy of any police report filed in regard to this incident. There are approximately [#] Rhode Islandresidents impacted by this incident.

Date (Format: Month Day, Year) first name middle name last name suffix address 1 address 2 city , state province postal code country b2b text 1 (Notice of Data Breach) Dear first name middle name last name suffix ,Horizon Actuarial Services, LLC (Horizon Actuarial) is writing to make you aware of a data privacy incident that may affect the privacyof some of your information. Horizon Actuarial provides technical and actuarial consulting services for benefit plans in the UnitedStates. You are receiving this letter because you or your family member are or were a participant in, or had contributions made onyour behalf to, the following benefit plan(s): b2b text 3 (Benefit Plan/Data Owner) b2b text 4 (Benefit Plan/Data Ownercont.) (the “Fund”). Information about you was provided by the Fund to Horizon Actuarial for business and compliance reasons.This letter provides details of the incident, our response, and resources available to you to help protect your information, shouldyou feel it is appropriate to do so. If you have any questions about this notice, please contact us at the number listed below under“For more information.” We ask that you direct your questions to that number and refrain from calling your Fund administrator.What Happened? On November 12, 2021, Horizon Actuarial received an email from a group claiming to have stolen copies ofpersonal data from its computer servers. Horizon Actuarial immediately initiated efforts to secure its computer servers and withthe assistance of third-party computer specialists, launched an investigation into the legitimacy of the claims in the email. HorizonActuarial also provided notice to the FBI. During the course of the investigation, Horizon Actuarial negotiated with and paid thegroup in exchange for an agreement that they would delete and not distribute or otherwise misuse the stolen information.The investigation revealed that two Horizon Actuarial computer servers were accessed without authorization for a limited period onNovember 10 and 11, 2021. The group provided a list of information they claimed to have stolen. On January 9, 2022, we determinedpotentially sensitive information was located in one of these files. We provided notice of the event to the Fund beginning on January28, 2022, and subsequently provided a list of affected individuals. Because you may have been impacted by the security incident,the Fund has authorized Horizon Actuarial to mail this letter to you.The Fund’s computers were not affected by the security incident. Your benefits have not been, and will not be, impacted by thesecurity incident.What Information Was Involved? Our investigation determined that the following types of information related to you may havebeen impacted: b2b text 2 (Impacted Data) .What We Are Doing. Horizon Actuarial takes this incident and the security of information in its care very seriously. Horizon Actuarial isreviewing its existing security policies and has implemented additional measures to further protect against similar incidents moving forward.We have arranged for you to activate, at no cost to you, identity monitoring services for 24 months provided by Kroll.Kroll is a global leader in risk mitigation and response, and their team has extensive experience helping people who have sustainedan unintentional exposure of confidential data. Your identity monitoring services include Credit Monitoring, 1 Million IdentityFraud Loss Reimbursement, Fraud Consultation, and Identity Theft Restoration.ELN-13657

Visit https://enroll.krollmonitoring.com to activate and take advantage of your identity monitoring services.You have until b2b text 6 (Activation Date) to activate your identity monitoring services.Membership Number: Membership Number s n For more information about Kroll and your Identity Monitoring services, you can visit info.krollmonitoring.com.If you prefer to activate these services offline and receive monitoring alerts via the US Postal Service, you may activate via Kroll’sautomated phone system by calling 1-888-653-0511, Monday through Friday, 8:00 a.m. to 5:30 p.m. Central time, excluding majorU.S. holidays. Please have your membership number located in your letter ready when calling. Please note that to activate monitoringservices, you will be required to provide your name, date of birth, and Social Security number through our automated phone system.Additional information describing Kroll’s services is included with this letter.What You Can Do. Horizon Actuarial encourages potentially impacted parties to activate the complimentary identity monitoringservices and remain vigilant against incidents of identity theft and fraud by reviewing account statements and monitoring noticesfrom their plans, including any Explanation of Benefits, and free credit reports for suspicious activity and to detect errors. Pleasealso review the information contained in the enclosed “Steps You Can Take to Help Protect Your Information.”For More Information. We understand that you may have questions about this incident that are not addressed in this letter. If youhave additional questions, please call us at (855) 541-3574, Monday through Friday, 8:00 a.m. to 5:30 p.m. Central Time, excludingmajor U.S. holidays, do not call your Fund Administrator. We take this incident very seriously and sincerely regret any inconvenienceor concern this incident may cause you.Sincerely,Mark K. LewisCOO/CFO

Steps You Can Take to Help Protect Your InformationACTIVATE YOUR IDENTITY MONITORINGYou have been provided with access to the following services from Kroll:Single Bureau Credit MonitoringYou will receive alerts when there are changes to your credit data—for instance, when a new line of credit is applied for in yourname. If you do not recognize the activity, you will have the option to call a Kroll fraud specialist, who will be able to help youdetermine if it is an indicator of identity theft. 1 Million Identity Fraud Loss ReimbursementReimburses you for out-of-pocket expenses totaling up to 1 million in covered legal costs and expenses for any one stolen identityevent. All coverage is subject to the conditions and exclusions in the policy.Fraud ConsultationYou have unlimited access to consultation with a Kroll fraud specialist. Support includes showing you the most effective ways toprotect your identity, explaining your rights and protections under the law, assistance with fraud alerts, and interpreting how personalinformation is accessed and used, including investigating suspicious activity that could be tied to an identity theft event.Identity Theft RestorationIf you become a victim of identity theft, an experienced Kroll licensed investigator will work on your behalf to resolve related issues.You will have access to a dedicated investigator who understands your issues and can do most of the work for you. Your investigatorwill be able to dig deep to uncover the scope of the identity theft, and then work to resolve it.Kroll’s activation website is only compatible with the current version or one version earlier of Chrome, Firefox, Safari and Edge.To receive credit services, you must be over the age of 18 and have established credit in the U.S., have a Social Security number in your name, and have aU.S. residential address associated with your credit file.MONITOR YOUR ACCOUNTSUnder U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax,Experian, and TransUnion. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-3228228. You mayalso directly contact the three major credit reporting bureaus listed below to request a free copy of your credit report.Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alertthat is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required totake steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to anextended fraud alert, which is a fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any one of thethree major credit reporting bureaus listed below.As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a creditbureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed toprevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that usinga credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interferewith, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, orany other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze onyour credit report. To request a security freeze, you will need to provide the following information:1. Full name (including middle initial as well as Jr., Sr., II, III, etc.);2. Social Security number;3. Date of birth;4. Addresses for the prior two to five years;5. Proof of current address, such as a current utility bill or telephone bill;6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification,etc.); and7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theftif you are a victim of identity theft.Should you wish to place a fraud alert or credit freeze, please contact the three major credit reporting bureaus listed below:

-888-298-00451-888-397-37421-833-395-6938Equifax Fraud Alert,P.O. Box 105069Atlanta, GA 30348-5069Experian Fraud Alert,P.O. Box 9554,Allen, TX 75013TransUnion Fraud Alert,P.O. Box 2000,Chester, PA 19016Equifax Credit Freeze,P.O. Box 105788Atlanta, GA 30348-5788Experian Credit Freeze,P.O. Box 9554,Allen, TX 75013TransUnion Credit Freeze,P.O. Box 160,Woodlyn, PA 19094You may further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect yourpersonal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or your state Attorney General.The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov;1877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover thattheir information has been misused to file a complaint with them. You can obtain further information on how to file such a complaintby way of the contact information listed above. You have the right to file a police report if you ever experience identity theft or fraud.Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof thatyou have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and your stateAttorney General. This notice has not been delayed by law enforcement.For District of Columbia residents, you can obtain information from the Federal Trade Commission and the Office of the District ofColumbia Attorney General about steps to take to avoid identity theft. You can contact the D.C. Attorney General: 441 4th St. NW#1100 Washington, D.C. 20001; 202-727-3400; and [email protected] Iowa Residents, state law advises to you to report any suspected identity theft to law enforcement or the Attorney General.For Maryland residents, you can obtain information from the Maryland Attorney General about steps that you can take to help preventidentity theft: 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; 1410-528-8662 or 1-888-743-0023; and www.oag.state.md.us.For Massachusetts residents, you have a right to request from us a copy of any police report filed in connection with this incident.If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it. As noted above, you alsohave the right to place a security freeze on your credit report at no charge.For New Mexico residents, you have rights pursuant to the Fair Credit Reporting Act, such as the right to be told if information in your creditfile has been used against you, the right to know what is in your credit file, the right to ask for your credit score, and the right to disputeincomplete or inaccurate information. Further, pursuant to the Fair Credit Reporting Act, the consumer reporting bureaus must correct ordelete inaccurate, incomplete, or unverifiable information; consumer reporting agencies may not report outdated negative information;access to your file is limited; you must give your consent for credit reports to be provided to employers; you may limit “prescreened” offersof credit and insurance you get based on information in your credit report; and you may seek damages from a violator. You may haveadditional rights under the Fair Credit Reporting Act not summarized here. Identity theft victims and active duty military personnel havespecific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review your rights pursuant to the Fair CreditReporting Act by visiting www.consumerfinance.gov/f/201504 cfpb summary your-rights-under-fcra.pdf, or by writing ConsumerResponse Center, Room 130-A, Federal Trade Commission, 600 Pennsylvania Ave. N.W., Washington, D.C. 20580.For New York residents, you may contact the following state agencies for information regarding security breach response and identitytheft prevention and protection information:New York Attorney General’s OfficeBureau of Internet and Technology(212) NYS Department of State’sDivision of Consumer Protection(800) or North Carolina residents, you can obtain information from the Federal Trade Commission and the North Carolina Office of theAttorney General about steps you can take to help prev

Visit https://enroll.krollmonitoring.com to activate and take advantage of your identity monitoring services. You hav