City and County of San Francisco Human Services Agency

City and County of San Francisco
Edwin M. Lee, Mayor
Human Services Agency
Department of Human Services
Department of Aging and Adult Services
Trent Rhorer, Executive Director
DATE
NAME
ADDRESS
CITY, STATE ZIP
RE: Incident Involving Your Personal Information
Dear JOHN SAMPLE,
We recently learned that your personal information was involved in an incident involving a former San
Francisco Human Services Agency (SF‐HSA) employee.
The Incident
We learned on December 7 th , 2010 that a former employee of SF‐HSA removed documents with
confidential client information from SF‐HSA and took them home. The former employee also emailed
some documents to her home computer between 2006 and 2009 and shared some documents with her
attorneys and union representatives as part of a legal action. We have recovered all of the documents and
ensured that all copies have been destroyed or returned to SF‐HSA. We have also obtained a court order
prohibiting any disclosure or unauthorized use of the information in the legal matter.
The Investigation
When we learned of this incident, we immediately retrieved the documents and conducted a thorough
investigation, including a forensic analysis of the individual’s work and home computers, to determine to
what extent the information had been compromised. Based on the results of the investigation, we believe
that there is little risk that your personal information has been misused or further disclosed to unauthorized
persons. However, we want you to know about the incident and what steps you can take to protect
yourself.
The Information Involved
One or more of the following types of information may have been included:
• Social Security numbers or MEDS identification numbers (a special number assigned by the state
to Medi‐Cal cases)
• County case/account number (case numbers we use to manage the program)
• Client Identification Number
• Age and/or date of birth
• Address
P.O. Box 7988, San Francisco, CA 94120-7988 • (415) 557-5000 • www.sfhsa.org/

• Eligibility status
• Aid codes (numbers about what type of Medi‐Cal)
• Case status (whether the person is still receiving Medi‐Cal or has a pending application)
Recommended Next Steps
Fraud Alert:
We recommend that you immediately place a free fraud alert on your credit files. To do this, make a
toll‐free call to any one of the three credit bureaus listed below (Experian, Trans Union or Equifax) to
receive instructions about obtaining a free copy of your credit reports and have a free fraud alert placed on
your credit files. A fraud alert can help prevent an identity thief from using the information to open new
accounts or modify information from existing accounts. Experian also allows you to file a fraud alert online.
The credit bureaus will ask for your Social Security number and other information in order to identify you
and avoid sending your credit report to the wrong person. Once you have contacted one of the credit
bureaus you will soon receive a letter from each bureau confirming the fraud alert and telling you how to
order a free copy of your credit report. When you get the report, look for personal information, such as
home address and Social Security number that are not accurate. If you see anything you do not
understand, call the credit‐reporting agency at the telephone number on the report.
Credit Bureau Fraud Departments
Experian Trans Union Equifax
Phone 888-397-3742 800-680-7289 800-525-6285
TDD 800-972-0322 877-553-7803 1-800-255-0056 &
ask forAuto
DisclosureLine,
800-685-1111
Address P.O. Box 9554
Allen, TX 75013
Website
www.experian.com
Online fraud alert:
http://www.experian.com/consumer/fraud_faqs.html
P.O. Box 6790
Fullerton, CA 92834
www.transunion.com
P.O. Box 740241
Atlanta, GA 30374-
0241
www.equifax.com
Credit Monitoring:
SF‐HSA is arranging for you to have free access to a credit monitoring service, and will be sending you
information about this service.
Suspicious Activity Reporting:
If you do find suspicious activity on the credit reports, you will need to contact the creditors involved. To
clear up inaccuracies, you may even need to file a police report to document the identity theft. You may
need to give copies of the police report to creditors to clear up the inaccuracies. For more information on
2

identity theft, you may visit the web site of the California Office of Privacy Protection at
www.privacy.ca.gov.
We take client privacy and this matter very seriously and have taken steps to ensure that this does not occur
in the future. We regret that this incident occurred and are sorry for any inconvenience this has caused. If
you have questions regarding the details of this incident, please call 1‐888‐729‐8182 and one of our
representatives is prepared to assist you.
Sincerely,
Trent Rhorer
Executive Director
3