NOTICE OF DATA INCIDENT
Dear Valued Customer,
We are writing to let you know that a cybersecurity incident involving a number of e-commerce websites operated by Warner Music Group (“WMG”) through an external service provider may have allowed an unauthorized third party to acquire a copy of personal information you entered into those websites. We want to emphasize at the outset that keeping personal information safe and secure is very important to us, and we deeply regret that this incident has occurred.
WHAT HAPPENED?
On August 5, 2020, we learned that an unauthorized third party had compromised a number of US-based e-commerce websites WMG operates but that are hosted and supported by an external service provider. This allowed the unauthorized third party to potentially acquire a copy of the personal information you entered into one or more of the affected website(s) between April 25, 2020 and August 5, 2020.
While we cannot definitively confirm that your personal information was affected, it is possible that it might have been as your transaction(s) occurred during the period of compromise. If it was, this might have exposed you to a risk of fraudulent transactions being carried out using your details.
WHAT INFORMATION WAS INVOLVED?
Any personal information you entered into one or more of the affected website(s) between April 25, 2020 and August 5, 2020 after placing an item in your shopping cart was potentially acquired by the unauthorized third party. This could have included your name, email address, telephone number, billing address, shipping address, and payment card details (card number, CVC/CVV and expiration date). Payments made through PayPal were not affected by this incident.
WHAT WE ARE DOING
Upon discovering the incident, we immediately launched a thorough forensic investigation with the assistance of leading outside cybersecurity experts and promptly took steps to address and correct the issue. We also notified the relevant Canadian privacy regulatory authorities, relevant payment card providers and appropriate law enforcement agencies, with whom we continue to cooperate.
To protect you further, we are offering credit monitoring and identity theft protection services through Equifax for 12 months, free of charge. You can find further details below on how to sign-up.
WHAT YOU CAN DO
We strongly encourage you to take advantage of the credit monitoring and identify theft protection services we are offering and to remain vigilant for any unauthorized use of your payment cards or suspicious email communications, particularly those purporting to come from Warner Music Group or any WMG-related websites.
If you identify any potentially suspicious transactions or other indications of identity theft, you should contact the relevant bank or card provider as soon as possible. Please find enclosed additional steps that you can take to protect yourself, including details on how to place a fraud alert on your credit file.
CREDIT MONITORING
We are working with Equifax to offer you free unlimited access to Equifax Premier online for 12 months. Equifax Premier will enable you to monitor your Equifax Credit Report and personal information on the web to help you protect yourself from identity fraud. Learn more at http://myservices.equifax.ca/prem
To activate this service, register at http://myservices.equifax.ca/prem using the code 754876939325 before December 21, 2020.
Please note, if you currently have, or have previously had an Equifax service, you will not be able to register online. Please contact Equifax’s Customer Care team on 1-866-349-6914. They are available 9am – 9pm on Monday to Friday, and 9am – 6pm on Saturday and Sunday (except December 25th & 26th) to answer your questions and provide any support you require.
FOR MORE INFORMATION
We sincerely regret that this incident has occurred and are very sorry for any inconvenience or concern it may have caused you. If you have any questions about the incident, please contact us at 1-866-349-6914 or [email protected]
Warner Music Group
Additional Guidance
Review Your Account Statements and Notify Law Enforcement of Suspicious Activity
As a precautionary measure, we recommend that you remain vigilant by reviewing your account statements and credit reports closely. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. You also should promptly report any fraudulent institution or any suspected incidence of identity theft to law enforcement authorities.
Obtain a Copy of Your Credit Report
Order a copy of your credit report from both Equifax Canada and TransUnion Canada. Each credit bureau may have different information about how you have used credit in the past. Ordering your own credit report has no effect on your credit score. Equifax Canada refers to your credit report as “credit file disclosure”. TransUnion Canada refers to your credit report as “consumer disclosure”. You can make the request by contacting the two credit bureaus as indicated below. You will need to follow the instructions provided and also confirm your identity by providing identification or answering a series of questions. Note that if you sign up for the Equifax Complete Premier Plan, you can obtain a copy of your Equifax credit report as part of the service provided.
| Equifax | TransUnion | By mail or fax | National Consumer Relations
P.O. Box 190, Station Jean Talon Montreal, Quebec H1S
or by fax to: 514-355-8502 CONSUMER RELATIONS CENTRE
3115 Harvester Road, Suite 201 Burlington, Ontario L7N 3N8 | CONSUMER RELATIONS CENTRE
3115 Harvester Road, Suite 201 Burlington, Ontario L7N 3N8 | By telephone | 1-800-465-7166 | Tel: 1-800-663-9980 (except Quebec)
Tel: 1-877-713-3393 (Quebec residents) | Online | https://www.consumer.equifax.ca/personal | https://www.transunion.ca/product/credit-report |
Place a Fraud Alert on Your Credit Report
You can also place a fraud alert on your credit report. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact Equifax Canada and TransUnion Canada using the information above." |
|