a report from Councillor Craig Kelley, Chair of the Public Safety Committee, for a public hearing held on March 20, 2019 to discuss the implications of identity theft and cybercrime on local residents and businesses to include Cambridge Police Departmental responses to these events and possible proactive measures to help people protect against such crimes

A MARCH 20TH 2019 Login **** xXXXxX Password ID THEFT & CYBERSECURITY TO KNOW MARK GUTIERREZ PUBLIC SAFETY COMMITTEE WHAT YOU NEED IS ON THE RISE IDENTITY THEFT

• Examples include: wallets/ purses, etc. • Names and addresses • Social Security Numbers Medical and other insurances WHAT IS IDENTITY THEFT? Credit cards and bank account information • When someone steals or uses your personal information without your permission medical offices, through offering fake jobs, loans, or housing opportunities, or direct theft of Information may be collected from trash, mailboxes, businesses, online databases, at work or

FREE Wi Fi EQUIFAX DATA BREACH https://www.youtube.com/watch?v=C5z8|Zk7bsl КИ АТ ТЕЕ РЕИР Hi. subject Payment declined within 24-48 hours. UPDATE PAYMENT Payment declined NETFLIX LOOKS like this ID theft in action on file but were unable to do so. We will you can continue using it with your account. From Netflix notification +zj462tocty)c@pausemassagethe... Update the expiry date and CVV (card verificat Not from Netflix We attempted to authorize the Amex card you Links to pl value) for your Amex card as soon as possible automatically attempt to charge your card agai < > C 1e Ship with ZPSGlobal x ZPSGlobal 4% 6% 90% Dark Web or personal gain. Deep Web a www.which inch such at boogle, alla World Wide Web The dark web consists of websites Over 90% of the information on the that use public internet, but require removed from the public web that's searchable through search engines. sold and used for financial, political accessible by surface web crawlers. anonymity. The stolen data is traded, indexed by search engines to ensure internet is in the deep web and is not However, it doesn't mean that they're specific software for access and is not dark web areas - they're just one layer WHAT IS THE L http://107.29.41.102/zpsglobal/x7890: DARK WEB?

Get medical care Damage your credit Steal your tax return TV, electric, and gas Use your name if they are arrested Open new credit cards in your name Open utility accounts in your name including phone, WHAT CAN • Make purchases with your bank or credit card information SOMEONE DO WITH YOUR INFORMATION?

614 2013 EVERY DAY 6,492,112 2014 Source: Identity Theft Resource Center EVERY HOUR 270,505 780 STATISTICS 2015 Data Breach Growth 4,508 EVERY MINUTE 1,091 2016 1,579 2017 75 EVERY SECOND Government documents or benefits fraud Employment or tax-related fraud Credit Card Fraud Phone or utilities fraud Loan or lease fraud Bank fraud https://breachlevelindex.com/ Source: The Federal Trade Commission's 2017 Consume: Sentine Network Report 25849 reports 30034 reports 50517 reports 55045 reports was used and the stolen data was rendered useless. 82051 reports Most Common Types of Identity Theft Only 4% of breaches were "Secure Breaches" where encryption 133015 reports

information. implications). STATISTICS 1% reported feeling suicidal. 26% of respondents had to borrow money from family or friends. 27% of data breaches in 2017 were medical or healthcare related. 25% of respondents said they sought professional help to manage their identity theft 32% of Americans complained about credit card fraud in 20l6, double the rate from 2015 experience either going to a doctor for their physical symptoms, or seeking some kind of counseling (therapy, group therapy, or some kind of support in that manner for the emotional 75% of identity theft victims reported that they were severely distressed by the misuse of their Sources: Identity Theft Resource Center (ITRC) Aftermath Study; https://www.experian.com/blogs/ask-experian/identity-theft-statistics/

COMCAST Discovered 3 fraudulent events notification from my Mint app • My only warning was an iPhone PERSONAL EXAMPLE Case is still ongoing after 3 months • Verizon- Account opened, no charges verizonwireless Comcast- Credit inquiry, attempted account open Montgomery Ward- Credit inquiry, attempted to open account and purchase goods, blocked by fraud alert • 3165,821 August spending of spending You've apent $1,638 s0 Easily keep track ward $165,821 Create budgets you can stick to 720 Get your free credit score & more

by mail with 3 bureaus 1st Traud activity Mint notification of Placed credit freeze to order credit report Called credit bureaus HQ companies Picked up police 3 agencies and 3 new report at HQ report in person at station, then pick up HQ, file supplement in person at original Mailed documents to Police advised me to pick up report at BPD • Called credit bureaus Tailed inquiry at BPD HQ police report from company 5) police report Received credit Picked up police 3) government ID Directed me to file Requested I send: 2) letter of deletion Directed me to call reports, discovered Placed fraud alerts 4) proof of residency 3rd traudulent activity Attempt to order all 3 * company that placed 1) authorization letter report w/ supplement credit reports online alert companies Called company 2nd fraud activity Called 2nd and 3rd original police station occurred after fraud < above person shutdown) 2) police report similar forms as after 1st attempt 3) government ID Directed me to file due to government 4) proot of residency Directed me to mail: Filed police report in Filed report with FTC failed (website offline 1) completed affidavit 3) authorization letter

form What to do: We're sorry P.O. Box 105281 → C d What happened: TransUnion. Atlanta, GA 30348 •experian. Annual Credit Report Request Service We are unable to complete your request https://www.identitytheft.gov/ Unable to Complete Your Request • To request your Free Annual Credit Report by phone, please call [phone removed] A condition exists that prevents Experian from being able to accept your request at this time. Unfortunately, your request cannot be fulfilled online at this time based upon the data provided. To obtain your Experian annual credit report, please mail your request to the address below using the Information • Alternately to request your Free Annual Credit Report by mail. return to annualcreditreport.com to download the request We will resume normal operations when the government is funded. EQUIFAX How to Request by Mail 2019. Questions can be directed to 877-ID THEFT when the government resumes operations. Online Delivery Unavailable along with the documents described below, and mail them to: We are not able to deliver your free Equitax Annual Credit Report online. and ordering credit reports Errors while filing with FTC Due to the government shutdown, we are unable to offer this website service at this time. Information about identity theft can be found on the FT's website at: Identity Theft Consumer For people receiving automated emails about the deactivation of identitytheft got accounts, please note that this process has been suspended and accounts will not be de-activated after January 9, To request your free Equitax Credit Report by mail, please fill out the attached form (PDF file).

Most at risk: • Elderly Wealthy • Children COMCAST • High social media users WHO IS MARG G? Those with weak passwords Mark does not fit any of those categories... verizonwireless August spending of spending 36 so Easily keep track ward $165,821 Agatatus Create budgets you can stick to What do grandparents, truckdrivers, those working 2 jobs or without PTO, etc. do? 720 Get your free credit score & more

the safest option. identify fraudulent activity. • Check credit reports at least annually: Sign up for paid credit monitoring services. WHAT CAN PEOPLE DO PROACTIVELY! • Guard your personal information as you would property or possessions. they have to personally call you for verification before opening an account. Review credit card, bank statements, and medical bills carefully and regularly. The only authorized website protected by Federal law for free credit reports is: Beware of free offers from for-profit companies like Credit Karma, which does not provide your FICO score, and does not use all 3 agencies. Additionally, credit scores won't alone help Place a fraud alert. This still allows companies to access your credit report (place an inquiry) but Place a security freeze. This blocks all lenders from accessing your credit report in any way and is annualcreditreport.com ([phone removed]). Allowed one free copy for each agency per 12 months.

inspector. • Stolen Mail • Internet Websites • Bank Statements keep it in a secure place. can be stolen. A few are listed below: • Falsely Obtained Credit Reports • Pre-approved Credit Card Applications • Discarded Credit Card & ATM Receipts Tips to Protect Yourself from Identity Theft: writing and "opt-out" of pre-screening lists. • Don't give personal information over the phone Identity Theft Prevention and ask if they can use a different identification number. Cambridge PD this right, and check your credit report closely for accuracy. • Disclose your social security number ONLY when absolutely necessary. • Change your driver's license number to a randomly assigned "S" number. • Carry ONLY those credit cards you use regularly, and cancel all unused credit cards. • Do not routinely carry your social security card or birth certificate in your wallet or purse. • Theft of a Wallet or Purse, Credit Cards, Social Security Card, Birth Certificate, Passport ATM machines. Do not allow others to closely view you as you enter your password or PIN. • Shred sensitive documents with a personal shredder. Shredders with diamond cuts are best Identity theft is a crime where a criminal assumes someone else's identity for profit. It is becoming • Destroy all credit card and ATM receipts, do not discard them in banks or retail establishments. • Closely review all credit card statements each month to detect unusual activity or unauthorized • Destroy pre-approved credit card solicitations, contact all three major credit-reporting bureaus in • Keep an accurate list of all credit cards and bank accounts including name, mailing address and • Nounr riun unur Dil numhar nit tn comann nuar tha talanhan aunn if thau caw that thay warl for •If you suspect that your mail is being stolen or tampered with, contact your local post office or postal telephone number of creditor, the account number, and expiration date. Update the list regularly and • As a Massachusetts resident, you are entitled to a free copy of your credit report each year. Exercise • Do not use your year of birth or other easily identifiable code as a password or PIN for credit cards or increasingly common in developed countries, especially the U.S. There is a multitude of ways your identity • Contact card carriers (such as health insurance) who use your social security number as identification Equifax Experian Trans Union password. your satety / tips discarding them. Identity Thett [phone removed] [phone removed] [phone removed] particulariy vulnerable to this crime. reduce your chances of becoming an and other financial documents before • Do not use your date of birth as your • Shred pre-approved credit applications personal information. By keeping close • The first step to prevent identity theft is Security number and passwords. Dont Identity thett victim. Memorize your Social crimes in the nation, and students may be Boston PD awareness of how and when you use your Important Contact Information for Identity Theft Victims birth certificate with you statements for unusual activity unless you initiated the contact • Never give personal or financial record your password on papers you carry • Report lost or stolen credit cards thoroughly review them for accuracy information over the phone or Internet tabs on your personal information, you can Do not carry your Social Security card or •Check your monthly credit card and bank • Identity theft is one of the fastest growing • Order credit reports every year from each of the major credit reporting agencies and

information money from victim • Is online reporting possible? Could this be an online resource? from BPD HQ during business hours • Need for dedicated, trained set of professionals to help victim? Option to have a 'packet' or step-by-step guide available of victim response? CAMBRIDGE DO IT TOO? Credit reporting agencies are horrendous to deal with, but no real ability to impact them • Offer protection services and education online and in libraries, schools, senior centers, etc. Talked to several officers, no clear expertise, lots of officer confusion, some didn't take notes or give accurate Why is it necessary to go to PD in person multiple times (and can only pick up completed Incident Report Dealing with fraud departments at companies is difficult and they require loads of information that take time and WHAT COULD BOSTON HAVE DONE BETTER AND CAN

fraud.aspx RESOURCES identity-has-been-stolen.html ITRC: https://www.idtheftcenter.org/ 0009_identitytheft_a_recovery_plan.pdf • FTC Reporting Fraud Activity: https://www.identitytheft.gov/ FTC ID Theft Recovery Plan: https://www.consumer.ftc.gov/articles/pdf- FTC Resource: https://www.consumer.ftc.gov/features/feature-0014-identity-theft Bankrate Step-by-Step Guide: https://www.bankrate.com/finance/credit/steps-for-victims-of-identity= LifeLock Steps: https://www.lifelock.com/learn-identity-theft-resources-do-these-things-immediately-if-your-