Subject: University Response to Tax Fraud
From: Campus Broadcast <[email-masked]>
To: Campus Broadcast <[email-masked]>
Date: Mon, 8 Jun 2015 14:37:51 +0000

Dear Colleagues,

The University recently learned that several members of the community were the victims of federal tax fraud. There is no indication that these incidents are related to any compromise of Georgetown University systems. However, Georgetown takes information security very seriously, and is working with those affected to gather information and provide assistance. Our colleagues at other universities report very similar information, also with no indication of a system compromise at their institutions.

It is not known exactly how the personal information used in this theft were obtained; but, we do know that the number and scale of reported breaches last year (by companies such as Anthem, Premera, JP Morgan Chase, and others) encompassed more than 1 billion stolen records, increasing the overall risk of identity theft significantly for all of us.

If you have been the victim of this theft, please notify the University Information Security Office, [email-masked]<http://links.georgetown.mkt6170.com/ctt?kn=6&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0>. Law Center faculty and staff should also notify the Law Center CIO, George Petasis. This will help us better understand the scope of impact on the University community.

Those who believe they may be the targets of tax fraud should consider immediately taking the following steps, as recommended by the Federal Trade Commission<http://links.georgetown.mkt6170.com/ctt?kn=3&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0>.

  1.  File a report with your local police.
  2.  Report the fraud to the Internal Revenue Service, Identity Protection Specialized Unit: 1-800-908-4490<http://links.georgetown.mkt6170.com/ctt?kn=1&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0>.
  3.  Create an Identity Theft Report by filing an identity theft claim <http://links.georgetown.mkt6170.com/ctt?kn=5&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0> with the FTC and filing a police report.
  4.  Send a copy of your police report or an IRS ID Theft Affidavit Form<http://links.georgetown.mkt6170.com/ctt?kn=4&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0>, along with proof of your identity, to the IRS.
  5.  Update your files.
  6.  Record the dates you made calls or sent letters.
  7.  Keep copies of letters in your files.
  8.  Put a fraud alert<http://links.georgetown.mkt6170.com/ctt?kn=2&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0> on your credit reports.
  9.  Order and monitor your credit report.

The FTC also provide a comprehensive identity theft action document (PDF)<http://links.georgetown.mkt6170.com/ctt?kn=7&ms=MjI3ODYzNzkS1&r=MTE3Njk5NDE1MjkzS0&b=0&j=NTgwNDc5Nzc2S0&mt=1&rt=0> with step-by-step instructions on recovering from this crime.

Regards,

Judd Nicholson
Interim Vice President for Information Services & Chief Information Officer
Georgetown University