blank

Frequently Asked Questions

Please check this page often for updated information.


I. Questions About the Data Breach

What happened?

America’s Job Link (AJL) has informed the Idaho Department of Labor that a system modification implemented in October 2016 allowed a vulnerability in the system that was exploited March 12-13. AJL identified the attack and acted expeditiously to correct the vulnerability. AJL also immediately retained the services of an independent, highly respected firm specializing in cybersecurity issues to determine that the vulnerability was eliminated, the system was safe to continue using and which users were affected by the incident. AJL has assured its members and other state cybersecurity experts that this system vulnerability has been eliminated.


Is this for real or a hoax trying to get our information?

The incident is not a hoax. If you received a letter or an email from the Idaho Department of Labor about the AJL data breach, you need to take it seriously and take some steps to protect yourself from identity theft. Our customers and staff also need to be careful in dealing with the incident and its effect. Please carefully read and follow all information and recommendations provided by the department online at labor.idaho.gov/security. Make sure any correspondence that you receive representing the department has an appropriate address. Email addresses should clearly end with @labor.idaho.gov.


What type of information was accessed? My Social Security number? My personal address?

An investigation into the accessed accounts revealed an individual with unauthorized access could see the name, date of birth and Social Security numbers of affected job seekers.


What’s the Idaho Department of Labor going to do to make this right?

We take the data security of our Idaho customers very seriously. The department is working closely with AJL and advocating strongly for our customers.


In addition, AJL has agreed to offer individuals whose accounts were compromised with one year of free credit monitoring services. Customers will receive an email by Sunday, April 9th from AJL with the email address AJLAincidentresponse@AJLA.net, which will include an access code required to sign up for the credit monitoring. Go online to www.myservices.equifax.com/silver where you will enter the access (activation) code and proceed to set up credit monitoring. If you do not have an email address in IdahoWorks, please call the AJLA Response Center for more information at (844) 469-3939. Customers can call from 7 a.m to 7p.m Mountain Time, Monday-Friday.


I received an email and I haven’t used IdahoWorks for years. Do I still have anything to worry about? What does all this mean?

If you received an email or a letter from us it means your name, date of birth and Social Security number may have been viewed by someone unauthorized to access the IdahoWorks database. Please follow the instructions on the letter or email and call one of the credit agencies to place a fraud alert on your account. Here’s how: https://www.consumer.ftc.gov/articles/0275-place-fraud-alert.


How far back does the affected data go?

Five years. If the job seeker has not used IdahoWorks since Jan. 1, 2011, then those records were purged from the system long before the data breach.


II. Questions About What I Should Do Now?

What Do I Do Now?

Affected customers should follow the instructions on the letter or email and call one of the credit agencies to place a fraud alert on your account. Fraud alerts are normally provided free of charge for 90 days. Notification to one of the services listed on our web page automatically creates notification with all the services. Instructions for placing a fraud alert on your credit can be found at: https://www.consumer.ftc.gov/articles/0275-place-fraud-alert.


In the meantime, watch your financial accounts. If you notice any suspicious activity, contact your local law enforcement officials and file a police report. For more information, visit labor.idaho.gov/security.


In addition, AJL has agreed to offer individuals whose accounts were compromised with one year of free credit monitoring services. Customers will receive an email by Sunday, April 9th from AJL with the email address AJLAincidentresponse@AJLA.net, which will include an access code required to sign up for the credit monitoring. Go online to www.myservices.equifax.com/silver where you will enter the access (activation) code and proceed to set up credit monitoring. If you do not have an email address in IdahoWorks, please call the AJLA Response Center for more information at (844) 469-3939. Customers can call from 7 a.m to 7p.m Mountain Time, Monday-Friday.


Should I pay for a credit freeze or credit monitoring?

Customers whose accounts were compromised are being offered 1 year of free credit monitoring services. Customers can place fraud alerts for free by contacting any of the 3 credit reporting agencies. If you choose to pay for services such as a credit freeze or credit monitoring beyond 1 year, please be aware that Idaho Department of Labor is not authorized to reimburse you for those costs.


The email mentioned going to the police and filing a report. How does that work? Can I do it online or by phone?

If you notice any suspicious activity on any of your credit cards or bank accounts, call your local law enforcement agency and report it, telling them you believe you may be a victim of fraud or identity theft. Ask for a copy of the report to submit to your creditors and others that may require proof of a crime to clear up your records. The report may also provide you with access to services that are free to identity theft victims.

The answer to this question can also be found at labor.idaho.gov/security. The department also requests that if you experience any inappropriate activity and/or file a related police reports to please email that information to the department at incidentquestions@labor.idaho.gov


Who can I call about this incident?

If you can’t find an answer to your question at labor.idaho.gov/security, call the AJL Response Center at (844) 469-3939. The Response Center’s hours are 7 a.m. until 7 p.m. Mountain Daylight Time and 6 a.m. – 6 p.m. Pacific Daylight Time, Monday through Friday. Labor.idaho.gov/security is a web page we set up to provide our customers with the most relevant, up-to-date information we can provide and contains answers to many frequently asked questions. Check it frequently.


What is the next step after I follow the email directions? Is the department going to let me know the outcome or follow up by email or by mail?

We will contact you by email or letter if there is an action or step you need to take in addition to what’s already been suggested. We’ve also set up a web page - labor.idaho.gov/security - to provide our customers with the most relevant, up-to-date information we can provide so check it frequently. It contains answers to many frequently asked questions.


I received a letter addressed to someone who is deceased. What do I need to do?

Identity theft can still occur after someone has passed away. Please see these links for additional information about what to do in this case.


III. Questions About Data Security

Can these hackers get into my bank account and take all my money?

The department does not know the abilities of the perpetrators of this incident to exploit the information. That is why the department is encouraging all customers to actively monitor their accounts and personal information. This advice is important for all customers whether they were affected by this incident or not.


How long should I be watching my financial accounts?

Data breach or no data breach, if you use a credit or debit card, bank online or make any kind of electronic financial transaction, you face some risk that your personal information or money could be stolen. Look at and monitor your accounts regularly.


Should I contact my bank and my card companies and get my account numbers changed?

Changing your bank and credit card account information is certainly an option and an extra step you may want to consider. Just remember, you will also need to change the account access information for any automatic bill payment or other automatic deductions you have set up.


I was job attached and didn’t have to register with IdahoWorks. Did they get my information off the unemployment system?

If you filed a claim for unemployment insurance or file a claim in the future, your name, address and Social Security number are automatically uploaded to IdahoWorks. The department has attempted to contact those people affected using the most recent email or postal address in IdahoWorks.


IV. Questions About Accountability

What is the Idaho Department of Labor going to do to secure my information? – Administrative Services / IT Security

The department has prepared detailed guidance for our customers on how to protect against inappropriate use of this information. All customers are strongly encouraged to follow the instructions provided at labor.idaho.gov/security.


How many times has this happened with the Idaho Department of Labor?

This is the first time a department contractor’s system has been breached. The department has had an extensive cybersecurity program in place for years. The state of Idaho is in the process of evaluating all third-party arrangements for security to assure Idahoans that these vendors are providing adequate protection.


V. Questions about Checking and Deleting Accounts

I know that I registered in the IdahoWorks system, but I did not receive a letter or email. Is there any way to tell if my information was potentially obtained in the security breach?

The department has attempted to contact those people affected using the most recent email or postal address in IdahoWorks.


What should I do if I want to delete my account or delete some specific information?

If you are receiving other services through the Department, deleting your account or deleting some of your information may or may not affect your ability to continue receiving those services. Please contact the department via email at incidentquestions@labor.idaho.gov for additional information about deleting your account or any specific information, and what effect, if any, this could have on your continued receipt of services.

       

Adjusting Text Size

Use your web browser to control the text size of our website. See below for where to find these controls.


Google Chrome:


Safari:


Internet Explorer 6:


Internet Explorer 7+:


Mozilla Firefox:


Mozilla Firefox 2:



See instructions for other web browsers.