Notice of Data Breach
We are writing to inform you of an incident involving your personal information. The intent of this letter is to share what we know, what we are doing to address it, and to provide some information and resources for steps you can take to protect your personal information.
TTI Floor Care North America ("TTI"), which owns Hoover and other brands, recently discovered that an unknown party accessed a limited number of its customer names, email addresses, and legacy usernames and passwords relating to an old version of the Hoover.com website without authorization. The old version of the Hoover.com website was no longer in use or accessible at the time of the incident. There was no access to any financial information, such as credit card numbers and bank accounts. This incident occurred in July 2017.
What Information Was Involved
The information involved was customer names, email addresses, and Hoover.com usernames and passwords. The data accessed involved a data file containing information from an old version of the Hoover.com website that was deactivated and inaccessible at the time of the incident. The active website at the time of the incident required users to create a new account by selecting usernames and passwords, and it was not affected by the breach. At this time, we are not aware of the unauthorized use of any information. We thus wanted to make you aware of these events and provide you with information about how to protect yourself.
What We Are Doing
Upon discovery of the unauthorized access, we completed a thorough review of our technology and customer data processes. Procedures and systems have been updated to protect our consumers and TTI from future unauthorized access.
What You Can Do
We urge you to change your new Hoover.com password if you used the same password on the old Hoover.com website. The new website launched on or about June 26, 2017, so please use this date as a reference in determining whether or not you need to update your password. If the same password used on the old Hoover.com website was used for multiple accounts, then the password should be changed on the other accounts as well. If there is any doubt please change your password. Security experts recommend that you never reuse passwords on multiple websites. We also encourage you to periodically check your credit reports to ensure that no fraudulent activity has occurred. Even if there are no signs of fraud on these reports, we recommend that you remain vigilant, continue to check these credit reports and your account statements periodically, and report anything suspicious to law enforcement.
We have also included a reference guide that suggests other steps you may take to help protect yourself, including recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on your credit file.
For More Information
Keeping your personal information secure is of the utmost importance to us. We sincerely regret any concern or inconvenience this event may cause you and are taking steps to help prevent this type of incident from happening in the future.
If you have questions regarding this letter, please contact the Data Breach Call Center at (888) 285-9447.
Customer Care Manager
State Notification Requirements
You may obtain a copy of your credit report or request information on how to place a fraud alert or security freeze by contacting any of the national credit bureaus below. It is recommended that you remain vigilant for incidents of fraud and identity theft by reviewing credit card account statements and monitoring your credit report for unauthorized activity.
P.O. Box 740241
Atlanta, GA 30374
P.O. Box 2104
Allen, TX 75013
P.O. Box 2000
Chester, PA 19022
For residents of Massachusetts and Rhode Island.
It is required by state law that you are informed of your right to obtain a police report if you are a victim of identity theft.
For residents of Massachusetts, Rhode Island, and West Virginia.
You also have the right to place a security freeze on your credit report by contacting any of the credit bureaus listed at above. A security freeze is intended to prevent credit, loans and services from being approved in your name without your consent.
To place a security freeze on your credit report, you may be able to use an online process, an automated telephone line or a written request. The following information must be included when requesting a security freeze (note that if you requesting a credit report for your spouse, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) current address and any previous addresses for the past five years; and (5) any applicable incident report or complaint with a law enforcement agency or the Registry of Motor Vehicles. The request must also include a copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. It is essential that each copy be legible, display your name and current mailing address, and the date of issue. The consumer reporting agency may charge a fee of up to $5.00 to place a freeze or lift or remove a freeze and free if you are a victim of identity theft or the spouse of a victim of identity theft, and you have submitted a valid police report relating to the identity theft incident to the consumer reporting agency. For residents of Iowa, Maryland, Michigan, Missouri, North Carolina, Oregon, and West Virginia.
It is required by state laws to inform you that you may obtain a copy of your credit report, free of charge, whether or not you suspect any unauthorized activity on your account.
For residents of Iowa.
State law advises you to report any suspected identity theft to law enforcement or to the Attorney General.
For residents of Oregon.
State laws advise you to report any suspected identity theft to law enforcement, as well as the Attorney General and Federal Trade Commission.
For residents of Illinois, Maryland, Rhode Island and North Carolina.
You can obtain information from the Federal Trade Commission, and for residents of Maryland, Rhode Island and North Carolina, from your respective state Office of the Attorney General, about fraud alerts, security freezes, and steps you can take toward preventing identity theft.
Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20580
Maryland Office of the Attorney General
Consumer Protection Division
200 St. Paul Place
Baltimore, MD 21202
Rhode Island Office of the Attorney General
Consumer Protection Unit
North Carolina Office of the Attorney General
Consumer Protection Division
9001 Mail Service Center
Raleigh, NC 27699-9001