Snap-on
Informational Website
This website is maintained by IDX on behalf of Snap-on for the purpose of providing you with valuable services and information to mitigate any risks in the event that you experience identity theft as a result of this situation
Enrollment
As a result of this incident and at no cost to you, Snap-on is offering IDX identity theft protection services which helps protect your identity with:
Enroll Now-
Credit Monitoring
2 years of credit monitoring (for adults) that alerts you to any changes to your credit report
-
Dedicated Experts
Access to Fraud Resolution Representatives to resolve and identity theft issues
-
CyberScan™
CyberScan will monitor criminal websites, chat rooms, and bulletin boards for illegal selling or trading of your personal information
-
Exclusive Information
Exclusive educational materials on protecting your identity including instructive articles, up-to-date information on new identity theft scams and tips for protecting yourself
-
ID Theft Insurance
Up to $1,000,000 in insurance reimbursements, covering certain expenses that you may incur in responding to an ID theft event
Frequently Asked Questions
What Happened?
- What happened?
In early March, Snap-on detected unauthorized activity in its IT environment and immediately took down its network connections as a matter of precaution. This effectively contained the incident, and Snap-on has not detected any further unauthorized activity.
In order to understand what happened and assess any potential impact to individuals, Snap-on launched an investigation with the assistance of a leading external cybersecurity firm. During this review, Snap-on discovered that some files containing personal information relating to Snap-on people was taken by the unauthorized third party during this limited period of access to its environment in early March.
Snap-on is now in the process of identifying and notifying individuals whose personal information was included in these files, which is why you may have received a notice letter by e-mail and/or postal mail, or otherwise heard about the incident.
- What personal information was exposed?
Based on its review of the impacted files, Snap-on currently believes the potentially impacted personal information primarily consists of names, Social Security numbers, date of birth and employee identification numbers. If your notice letter specifies a different type of information, please defer to your notice letter.
- Have the police been/local authorities been notified? If so, with which police department and what is the case number?
Yes. Snap-on notified the U.S. Federal Bureau of Investigation (FBI) during the early stages of the incident response.
- What is Snap-on doing to prevent this kind of loss from happening again?
Snap-on is taking measures to further harden its computer systems security. They engaged leading cybersecurity experts to aid in identifying additional measures.
- What are the risks of identity theft with the information that was exposed?
Receiving a letter does not mean that you are a victim of identity theft.
We recommend that all impacted individuals take steps to protect themselves, such as taking advantage of the complimentary credit and identity theft monitoring product, implementing either a fraud alert or a security freeze on your credit and monitoring your bank accounts and credit reports for unexpected activity. If you identify suspicious activity, you should reach out to your financial institutions immediately. We are here to help.
- Is there anything I need to do to in response to the exposure of my personal information?
We recommend that you enroll in the IDX identity protection membership.
As a matter of precaution, you should take proactive measures necessary to protect your personal information, such as monitoring and protecting bank accounts and credit. Many online banking platforms and other online accounts now offer you the option to enable multi-factor authentication to access your account, and we encourage you as a matter of best practice to reach out to these providers to learn how you can enable these and other similar security features.
Separately, you may also request a credit report from each of the three nationwide credit reporting agencies (Equifax, Experian, and TransUnion), as you are entitled to one free copy from each agency every year. You may take advantage of your rights to the free fraud alert services offered by the three major credit bureaus. Placing fraud alerts will provide your credit with additional protection. You may also place a credit freeze on your accounts with these three agencies. Information about a credit freeze is outlined in the letter you received and is available online from the Federal Trade Commission.
- What is the deadline for registering for the pre-paid package of identity protection services?
September 6, 2024.
- Who should I contact if I have questions?
Please contact IDX at 833-676-2143 for more information, if you have more questions, or for information on the membership services that are being provided.
- I did not receive a letter stating that my information was compromised, but feel that I should have.
To the extent your personal information was impacted, you either received or will receive a notice letter by postal mail. Snap-on’s review of the data has been extensive and they’ve begun the notification process of impacted individuals, its investigation into specific individuals impacted remains ongoing. As a result, Snap-on may notify additional individuals.
- What if I have a credit/security freeze in place?
You may not be able to activate credit monitoring if you have a security freeze in place on your credit file. You can still attempt the authentication process through the website. If you are flagged for manual authentication, then you many need to temporarily or permanently lift the security freeze. If you choose not to activate the monitoring, you will still have access to our recovery services.
- Your system said that I couldn’t activate my monitoring at this time, what should I do?
Most likely you entered a simple error and we could not validate your identity with the credit bureaus. The system allows you to try two times to activate. You will need to wait 72 hours following your first attempt before trying again.
If it’s been 72 hours, you should see a banner at the top of the webpage that indicates the credit monitoring still needs to be activated with a “Show Me” link. Click on the Show Me link and it will ask you for your details again. Another option is in the Services widget (Box) you can click on the “Activation Required” section and it will ask for your details again.
Minor Support Information
- Why can’t I pull my child’s credit report?
Most minors, under the age of 18, do not have a credit history established and are under the age to secure credit, therefore there is no credit report to pull.
- How can I check to see if someone has created a credit file using my child’s information?
TransUnion offers a secure online form that you can use to submit your child’s information to see if a credit file exists. Click here to go directly to the secure online form.
Additional information on child ID theft can also be found here.
Decedent Support Information
- What kind of coverage will the membership offer to someone who is deceased?
With this enrollment we will provide you, their legal representative, resolution assistance should they fall victim to fraudulent activity. The protection services apply to their identity, but the membership is truly there to support you if something were to happen.
- Why can’t I activate/authenticate the monitoring product for a deceased individual?
In most cases, decedents cannot be authenticated because the Social Security Administration or their legal representative (spouse, child, etc.) has already notified the credit bureaus that the person is deceased. If the credit bureaus have “frozen” the decedent’s credit files, the risk of identity theft has been significantly reduced.
Please know that the membership still provides recovery services to support you, their legal representative, if something was to happen; which is the real and true value.
- Is it possible to steal a deceased person’s identity?
Unfortunately, it is possible to steal the identity of someone who is deceased. Identity thieves obtain information about deceased individuals in various ways.
- How can someone steal a deceased person’s identity?
They may watch the obituaries, steal death certificates, or even get the information from websites that offer the Social Security Death Index file (which is actually intended for genealogy research).
- Does the Social Security Administration notify the credit bureaus and other financial institutions when someone is deceased?
Yes, but please be aware that it takes time for the Social Security Administration to conduct this notification, so financial institutions and the credit bureaus are not immediately made aware that a customer is deceased.
- Should I notify the credit bureaus when a dependent family member or spouse passes away?
Yes, you should immediately notify each credit bureau (Equifax, Experian, and TransUnion) in writing that the person is deceased and ask that a deceased alert be placed on their credit report.
- How do I place a deceased alert on the credit file?
You will want to notify each credit bureau (Equifax, Experian and TransUnion) in writing the following message:
“Deceased. Do not issue credit. If an application is made for credit, notify the following person(s) immediately: (list the next surviving relative, executor/trustee of the estate and/or local law enforcement agency- noting the relationship).”
Mail all correspondence via certified mail, return receipt requested. Be sure to keep photocopies of all correspondence, including letters that you send. Finally, you should also request a copy of the credit report.
Equifax
PO Box 740260
Atlanta, GA 30374Experian
PO Box 9554
Allen, TX 75013
(888)397-3742TransUnion
PO Box 2000
Chester, PA 19022- What documents will I need to send to the credit bureaus alerting them that the person is deceased?
You will need to include:
- A copy of the death certificate
- Name and SSN of deceased
- Last known address
- Date of birth
- Date of death
- Should I notify other financial institutions regarding the death?
Yes, immediately notify relevant credit card companies, banks, stock brokers, loan/lien holders, and mortgage companies of the death. The executor or surviving spouse will need to discuss all outstanding debts and how they will be dealt with. You will need to transfer the account to another person or close the account. If you close the account, ask them to list it as: “Closed. Account holder is deceased.” You may need to provide a copy of the death certificate to creditors as well as the credit bureaus. You should also notify utilities, phone companies, cell phone companies, etc, that you are terminating the account because the account holder is deceased.
- What happens if I do not notify the credit bureaus that the person is deceased?
Without a specific communication, the credit bureaus may not be aware of the death. An active credit file may stay open for up to 10 years without activity. During this time, an identity thief may use the decedent’s Social Security number to open up new lines of credit or apply for loans.
- What steps should be taken if I (surviving spouse or estate executor) suspect that someone is fraudulently using the information of a deceased person?
There are several steps that should be taken:
- You should request a copy of the decedent’s credit reports and place a “deceased alert” on the credit files
- You should also notify the police in the decedent’s jurisdiction and provide any evidence you have of the fraud (collection notice, bills, credit report)
- Notify any creditor, collection agency, credit issuer, utility company that the person is deceased and date of death. Be sure to include a copy of the death certificate. Request an immediate investigation and that they contact you with the results of the investigation. Insist on “Letters of Clearance,” which you should keep with the other estate papers.
- What should be done about joint accounts?
If there is a surviving spouse or other joint account holders, make sure to notify the company that the deceased’s name needs to be removed from the account. They may require a copy of the death certificate to do this, as well as permission from the survivor, or other authorized account holders.
- Is it possible to order a credit report for a deceased person?
If the credit bureaus have been notified of the deceased person’s death, it is not possible to order their credit report. The easiest way to determine this is to try to place a fraud alert for the deceased person. If the fraud alert is placed, then the bureaus have NOT been notified of the person’s death and ordering a report is possible. If you are informed that the fraud alert cannot be placed because the person is deceased, then you know that the bureaus have updated their records and that you will not be able to order a credit report.
Additional Resources
Fraud Alerts
On request, any of the three nationwide consumer credit reporting companies can place a free fraud alert in your file to alert potential creditors that you may be a victim of identity theft; a fraud alert can make it more difficult for someone to get credit in your name because it tells creditors to follow certain procedures to protect you.
A fraud alert will help prevent someone from opening new accounts in your name. As soon as one credit reporting bureau confirms your fraud alert, the others are automatically notified to place fraud alerts as well. All three bureaus will mail you a confirmation letter and you will be able to order complimentary credit reports for your review.
The easiest way to place an alert is by visiting www.transunion.com or https://fraud.transunion.com/fa/fraudAlert.
You will answer some questions to confirm your identity, and then a 90-day fraud alert will be added to your credit file. TransUnion will give you access to view your report online. You should examine it carefully for accuracy. TransUnion will also share this information with Equifax and Experian who will both mail you confirmation letters containing a number to call to order complimentary copies of your credit reports for review.
To contact one of the credit reporting bureaus, please see below:
Equifax: 1-800-525-6285
PO Box 740260
Atlanta, GA 30374Experian: 1-888-397-3742
PO Box 9554
Allen, TX 75013TransUnion: 1-800-680-7289
PO Box 2000
Chester, PA 19016It is only necessary to contact one of these bureaus and use one of these methods.
You will not be charged for this service. Please note placing a fraud alert may delay your ability to open new lines of credit quickly.
Annual Credit Report
Whether or not you choose to enroll in the IDX identity protection program, you can order a copy of your credit report, for free, once a year from each credit reporting bureau. You can obtain a free credit report by visiting www.annualcreditreport.com or by calling 1-877-322-8228.
Review Your Credit Report
When you receive any credit report, you should review it carefully. Look for accounts you did not open. Look for inquiries from creditors that you did not initiate. Look for personal information, such as home address, employment or Social Security numbers, that are not accurate. If you see anything you do not understand, call the credit reporting bureau at the telephone number on the report.
If your credit report indicates fraud or identity theft, call your local police or sheriff’s office and file a report of identity theft. Get a copy of the police report. You may need to give copies of the police report to creditors to clear up your records. If you suspect that you may be a victim of identity theft and you have enrolled in the IDX identity protection program, you should contact them immediately. You will be able to speak with a knowledgeable advocate about your situation and, if needed, they will open a case to resolve the identity theft on your behalf.
For More information
Should you wish to learn more about identity theft and how to protect yourself, you may contact the Federal Trade Commission at 1-877-438-4338. The FTC website, www.consumer.ftc.gov, also offers additional information on identity theft that you may find helpful.
Security Freezes
The security freeze (or credit freeze) is an option best reserved for people who have experienced extreme identity theft. Because the freeze essentially locks down your credit, it is not a good option for people who are simply seeking extra protection for their credit. We feel that credit monitoring, fraud alerts, and victim restoration services are more than sufficient options for defense against identity theft.
A security freeze will not prevent you from enrolling in our services. You can certainly sign up with us and do not need to lift the freeze to do so. The reason for this is because we do not request your Social Security number to enroll—only name, address, phone, and email. None of these items would necessitate a credit inquiry. However, a security freeze will affect your ability to activate the monitoring portion of your membership. To activate the monitoring portion you will need to temporarily lift your security freeze.
To learn more about security freezes and relevant state laws, contact your State Attorney General’s office or visit the Federal Trade Commission’s website for credit freeze information.
Please note that you must have an established credit file and credit history to place a fraud alert, a credit freeze or utilize www.annualcreditreport.com.