For current and former employees, physicians and locums

Credit monitoring and identity theft protection 

Who can enroll

Current and former employees, physicians and locums of Eastern Health over the past 28 years (prior to the October 2021 cyber-attack) are being offered access to credit monitoring services for a period of five (5) years from the date of enrollment, at no cost to them. This service is being offered to current and former employees, physicians and locums for five (5) years as opposed for the two (2) years being offered for patients given the difference in the type of information that was stolen. The deadline to register for these services was September 30, 2023.

Eligibility

This service is available to current and former Eastern Health employees, physicians and locums, over the age of eighteen (18) who have a Canadian credit file. For those living outside of Canada, coverage will depend on the availability of the service in their region. This service allows individuals to monitor their credit and identity information, as well as detect and respond to fraudulent credit activity. The deadline to register for these services was September 30, 2023.

Service details

Each current and former employee who enrolls will have access to the Equifax Complete™ Premier service package and will receive the following benefits for a period of five (5) years from the date of enrollment:

• Lost Wallet Assist: One-stop assistance in cancelling and reissuing your credit or debit cards, driver’s license, SIN card, insurance cards, passport, and traveler’s checks when your wallet is lost or stolen;
• WebDetect™ (Internet/web scanning): Receive alerts when Equifax detects your personal information (e.g. SIN or credit card number) is being used on the Internet;
• Daily credit monitoring with email notifications of key changes to your credit profile;
• Unlimited access to your Equifax Credit Score™ and report;
• Identity Restoration: A dedicated Identity Restoration Specialist will work on your behalf to restore your identity should you become a victim of identity theft;
• Up to $1,000,000 of identity theft insurance (further terms, conditions, and exclusions relating to coverage will be available in your policy upon enrollment);
• Ability to view how your score trends over time.

NOTE: In order to avail of the WebDetect™ (Internet/web scanning) feature, users must first complete the Equifax enrollment process and then, they must set up the web scan feature through their Equifax account. This benefit is included in the Equifax coverage but requires an extra step to set up.

Expiry information for current and former employees

Activation codes for current and former employees, physicians and locums expired on September 30, 2023.

Support

Equifax assistance for current and former employees, physicians and locums

Equifax has established a dedicated support line for current and former employees with questions related to Equifax enrollment, product information and other related inquiries. The Equifax assistance line for current and former employees is 1-866-820-9143. It is open from Monday to Friday, from 10:30 a.m. to 10:30 p.m. NST and on Saturday and Sunday, from 10:30 a.m. to 7:30 p.m. NST.

Provincial call centre

Current and former employees who have any questions about their personal health information as it relates to this cyber-attack, can contact the toll-free provincial information line at 1-833-718-3021.

Further information, including a list of frequently asked questions, is available on the Government of Newfoundland and Labrador website.

Mental health resources

We recognize that this is stressful for many people. Below is a list of mental health supports available to you:

• Bridgethegapp.ca: Online mental health and wellness resources
• CheckWithEva.ca: Virtual assistance that connects current and former employees with the most appropriate mental health support. This resource is 100% confidential and anonymous.
• Full listing of mental health and addiction services at: mha.easternhealth.ca.

Frequently asked questions for current and former employees, physicians and locums

1. What is Eastern Health doing in response to this privacy breach?
2. How do I know if my information has been affected?
3. What benefits are included in the Equifax program?
4. Is the Equifax coverage the same for both current and former employees?
5. I am a current or former employee, and I have also received health services from Eastern Health, do I need to enroll twice with Equifax?
6. If my information is misused before I receive an activation code, will the Equifax protection and insurance apply?
7. Are the estates of deceased former employees eligible for Equifax coverage?
8. If I received an error message while trying to enroll in Equifax, is my SIN or other information now at risk?
9. When and how will I receive an alert after I have enrolled in the Equifax Complete™ Premier service?
10. What happens if my Equifax account is flagged with an alert for fraudulent activity?
11. What does Identity Restoration entail?
12. What is included in the fraud insurance?
13. Can Equifax determine if a specific fraud alert is linked to the recent cyber events in NL?
14. Is Eastern Health offering enrollment in TransUnion as well?
15. Should I sign up for both Equifax and TransUnion?
16. Where can I direct further questions?

1. What is Eastern Health doing in response to this privacy breach? 

Eastern Health has been engaged with the Newfoundland and Labrador Centre for Health Information (NLCHI), along with the Department of Health and Community Services and other regional health authorities, as they worked to restore provincial health-care IT systems and investigate the nature and impact of this incident.

The Newfoundland and Labrador Office of the Information and Privacy Commissioner (OIPC), the RCMP, the Canadian Centre for Cyber Security, and other external agencies were immediately notified, and investigations are now complete.

To help protect your personal information, Eastern Health has entered into a contract with Equifax. Affected individuals who have worked for Eastern Health any time in the 28-year period prior to the October 2021 cyber-attack were offered access to credit monitoring and identity theft protection services for a period of five years from the date of enrollment, at no cost to them. This service is available to all current employees and former employees, physicians and locums over the age of 18, who have a Canadian credit file. For those living outside of Canada, coverage will depend on the availability of the service in their region. This service allows individuals to monitor their credit and identity information, as well as detect and respond to fraudulent credit activity. The deadline to register for these services was September 30, 2023.

Equifax has established a dedicated support line for questions related to Equifax enrollment, product information and other related inquiries. The Equifax assistance line for current and former employees can be reached at 1-866-820-9143. It is open from Monday to Friday, from 10:30 a.m. to 10:30 p.m. NST and on Saturday and Sunday, from 10:30 a.m. to 7:30 p.m. NST.

A provincial call centre has been established for inquiries related to this incident. The number is 1-833-718-3021.

2. How do I know if my information is affected?

Some of the personal information of current and former employees, physicians and locums was taken during a cyber incident in October 2021. This includes information such as: name, address, contact information, and social insurance number (SIN) of employees of Eastern Health over approximately the last 28 years (prior to the October 2021 cyber-attack). In addition, some human resources and administrative information has been affected by the breach. Affected individuals will be notified of this breach by mail. Individuals should follow the regular process, as previously outlined, to register for credit monitoring and identity theft protection services by the September 30, 2023 deadline.

If you believe your information may be impacted, you can take steps to protect your identity and credit. If you suspect that your Social Insurance Number (SIN) is being used fraudulently, Service Canada advises taking the following steps:

1. File a complaint with the police. Ask for the case reference number and the officer’s name and telephone number. If you choose to obtain a copy of the police report, make sure it states your name and SIN.
2. Contact the Canadian Anti-Fraud Centre at 1-888-495-8501. The national anti-fraud call centre is jointly managed by the Royal Canadian Mounted Police, Ontario Provincial Police and Competition Bureau Canada. They provide advice and assistance about identity theft.
3. Contact Canada’s two national credit bureaus (Equifax or TransUnion). Ask for a copy of your credit report. Review it for any suspicious activity. Also check to see if your credit file should be flagged (fees may be applicable). To obtain additional information regarding fees and other requirements, please contact: Equifax: 1-800-465-7166 and TransUnion: 1-800-663-9980.
4. Inform your bank and creditors by phone and in writing about any irregularities.
5. Report any irregularities in your mail delivery to Canada Post, for example, opened envelopes, missing financial statements or documents.
6. Visit a Service Canada office and bring all the necessary documents with you proving fraud or misuse of your SIN. Also bring an original identity document (your birth certificate, or immigration or citizenship document). Service Canada officials will review your information and provide you with assistance and guidance.

Alert the CRA: You can report suspected fraud or identity theft with the Canada Revenue Agency by calling them at 1-800-959-8281.

3. What benefits are included in the Equifax program for current and former employees?

Current and former employees, physicians and locums who enrolled, will have access to the Equifax Complete™ Premier service package and will receive the following benefits for a period of five (5) years from the date of enrollment, at no cost:

• Lost Wallet Assist: One-stop assistance in cancelling and reissuing your credit or debit cards, driver’s license, SIN card, insurance cards, passport, and traveler’s checks when your wallet is lost or stolen;
• WebDetect™ (Internet/web scanning): Receive alerts when Equifax detects your personal information (e.g. SIN or credit card number) is being used on the Internet;
• Daily credit monitoring with email notifications of key changes to your credit profile;
• Unlimited access to your Equifax Credit Score™ and report;
• Identity Restoration: A dedicated Identity Restoration Specialist will work on your behalf to restore your identity should you become a victim of identity theft;
• Up to $1,000,000 of identity theft insurance (further terms, conditions, and exclusions relating to coverage will be available in your policy upon enrollment);
• Ability to view how your score trends over time.

NOTE: In order to avail of the WebDetect™ (Internet/web scanning) feature, users must first complete the Equifax enrollment process and then, they must set up the web scan feature through their Equifax account. This benefit is included in the Equifax coverage but requires an extra step to set up.

4. Is the Equifax coverage the same for current, former employees and clients?

The benefit package offered by Equifax for credit monitoring and identity theft protection is the same for both current and former affected employees.

This service is being offered to current and former employees, physicians and locums for five (5) years as opposed for the two (2) years being offered for patients given the difference in the type of information that was stolen.

5. I am a current or former employee, and I have also received health services from Eastern Health, do I need to enroll twice with Equifax?

No, if you are or were a current or former employee at any time in the 28-year period prior to the October 2021 cyber-attack, as well as a client of Eastern Health at any time, you do not need to enroll in the Equifax service twice. To obtain the maximum benefit, use the Activation Code that was provided to you as an employee or former employee to enroll in the service and avail of the Equifax package for five (5) years.

This service is being offered to current and former employees, physicians and locums for five (5) years as opposed for the tow (2) years being offered for patients given the difference in the type of information that was stolen.

6. If my information is misused before I receive an activation code, will the Equifax protection and insurance apply?

Equifax agents can assist with an issue that is discovered as part of the enrollment process. A change in your credit file will only trigger an alert after you have enrolled in the program. However, as part of the enrollment process, you will be provided with a fresh copy of your credit report, which will allow you to review and detect issues that occurred prior to enrollment. You will then be able to avail yourself of the identity restoration services or make an ID theft insurance claim. Please ensure you inform the restoration agent or insurance carrier that the issue was discovered as part of the enrollment process.

If you notice unusual activity in your accounts, please report it to the appropriate authorities and contact your providers immediately.

7. Are the estates of deceased former employees eligible for Equifax coverage

Once a credit file is flagged as deceased, it is locked and cannot be monitored by Equifax. If you are the spouse of a deceased former Eastern Health employee, please call 1-833-718-3021 to determine if you are eligible for Equifax coverage related to this incident.

8. If I received an error message while trying to enroll in Equifax, is my SIN or other information now at risk?

No, Equifax is a secure website. Your information is not at risk from the Equifax enrollment process.

9. When and how will I receive an alert after I have enrolled in the Equifax Complete™ Premier service?

Individuals who sign up for the Equifax Complete™ Premier service will receive two different types of alerts, as follows:

1. Credit Monitoring

• • Equifax will alert you by email if there’s a change in your credit report. You will receive an alert for any of the following changes:
  • New hard credit inquiries
  • New deposit account inquiries
  • Name change
  • New collection accounts
  • New accounts
  • New bankruptcies
  • New or changes to public records
  • Changes to existing accounts
  • Change of address

Once you are enrolled, you have the ability to change the settings for which alerts to receive. You also have the ability via the settings in your Equifax account to request alerts if your credit score drops below a certain level (you set the level), rises above a certain level (you set the level), or changes status (for example, from ‘Good’ to ‘Fair’). These alert setting can be customized through your Equifax Complete™ Premier account.

2. WebScan (Dark Web / Internet Monitoring)

Once you enroll, you will have the ability to set up Dark Web scanning in your account settings.

Equifax will search suspicious websites for information. The options for Dark Web scanning include searches for: your SIN, passport, bank accounts, credit cards, and email addresses. If any of the information you enter is found on the internet, you will receive an alert.

Equifax will then provide recommendations and instructions on how you should address the alert. The instructions may vary depending on the nature of the alert.

10. What happens if my Equifax account is flagged with an alert for fraudulent activity?

If you receive an alert from Equifax that there is possible fraudulent activity associated with your personal information, Equifax will provide instructions in response to the alert. Any questions relating to these instructions should be directed to the dedicated Equifax telephone line. The Equifax assistance line for current and former employees can be reached at 1-866-820-9143. It is open from Monday to Friday, from 10:30 a.m. to 10:30 p.m. NST and on Saturday and Sunday, from 10:30 a.m. to 7:30 p.m. NST.

If you notice a suspicious charge on your credit card statement, or suspicious activity in your bank account, you should reach out immediately to the credit card issuer or bank. You should also reach out to Equifax to inquire if you are eligible to avail of the identity restoration service or the ID fraud insurance included in your Equifax service.

11. What does Identity Restoration entail?

Equifax’s Identity Restoration service includes access to an Identity Restoration Specialist who will:

• Guide you step by step through the Identity Restoration process and help you understand your options as a victim of identity theft.
• Contact creditors, merchants, financial institutions, and other third parties where identity theft occurred to alert them of fraud, dispute transactions, and resolve identity theft.
• Place fraud alerts with Equifax and TransUnion.
• Document and organize correspondence in case of additional fraud events.

12. What is included in the fraud insurance?

If you become a victim of identity theft, Equifax will reimburse the identity up to $1,000,000 for certain out of pocket expenses, such as:

• Lost wages from time taken to re-establish identity.
• Fees associated with re-filing applications for loans, grants, or other credit.
• Costs for notarizing affidavits or other similar documents, long distance telephone calls, travel and postage from your efforts to report an identity fraud.
• Legal fees up to $125 per hour, for defense of any legal action brought against you as a result of the identity fraud.

Please note that the fraud insurance included in your Equifax Complete™ Premier service does not cover “recovery of actual financial losses of any kind from acts of fraud or identity theft.”

13. Can Equifax determine if a specific fraud alert is linked to the recent cyber events in NL?

No, if you receive an alert on your Equifax account suggesting fraudulent activity, Equifax is unable to determine whether the fraudulent activity is associated with any particular event or breach of information.

14. Is Eastern Health offering enrollment in TransUnion as well?

Eastern Health is offering protection to employees through Equifax only. If you choose to enroll in TransUnion, you are solely responsible for any cost associated with that service.

15. Should I sign up for both Equifax and TransUnion?

Whenever credit is issued, the body issuing the credit (for example, a bank) will check your credit history via either Equifax or TransUnion prior to issuing the credit. If your SIN is used fraudulently to obtain credit, the initial credit check by the issuing body may occur through TransUnion instead of Equifax.

If you are enrolled in both TransUnion and Equifax, you would receive an alert on one of these accounts prior to the credit being issued, depending on whether the issuing body uses TransUnion or Equifax. As a result, you may be able to act in time to prevent the credit from being issued.

If you are enrolled in Equifax only and the credit issuing body checks your credit history via TransUnion instead of Equifax in response to someone fraudulently attempting to obtain credit using your SIN, you will not receive an alert through your Equifax account until the credit has been issued.

The Equifax Complete™ Premier credit monitoring will alert you when any new credit is issued that is associated with your Social Insurance Number regardless of whether the third-party issuing the credit checks your credit via Equifax or TransUnion. Therefore, if your social insurance number is used to fraudulently obtain credit in your name, your Equifax account will be flagged and you will be alerted when the credit is issued. You will then be able to take steps to correct the fraudulent activity and have it cancelled.

According to Equifax, Equifax accounts for approximately 70 per cent of the market in Canada.

As noted, Eastern Health is offering protection to employees through Equifax only. If you choose to enroll in TransUnion, you are solely responsible for any cost associated with that service.

16. Where can I direct further questions?

A provincial call centre has been established for inquiries related to this incident. The number is 1-833-718-3021.

Equifax has established a dedicated support line for questions related to Equifax enrollment, product information and other related inquiries. The Equifax assistance line for current and former employees can be reached at 1-866-820-9143. It is open from Monday to Friday, from 10:30 a.m. to 10:30 p.m. NST and on Saturday and Sunday, from 10:30 a.m. to 7:30 p.m. NST.