Idaho Fish and Game today learned that personal information for license buyers who began purchasing hunting and fishing licenses and tags prior to 2008 was potentially accessed by a breach of the online computer license sales system owned and operated by Active Network, a Texas-based company.
During a Friday afternoon conference call, Active Network executives told Fish and Game that it cannot confirm whether any personal information was actually taken but that it is possible.
The data breach apparently occurred sometime over the summer. Personal information potentially includes name, age, address, and Social Security Number. Idaho Fish and Game is required by state law to obtain this information to issue a license.
Credit card information is not kept in the Active Network licensing system and Fish and Game is confident it was not accessed.
“This is a serious matter and we encourage all license holders who may potentially be affected to take proactive steps to protect themselves,” Fish and Game Deputy Director Ed Schriever said. “We apologize to our license buyers and will continue to work with Active Network to get to the bottom of this.”
Active Network notified Idaho Fish and Game of the online breach on August 23. Fish and Game shut down the online portion of the system the next day. Fish and Game requested Active Network hire an independent cybersecurity firm to conduct a review and the company agreed to the request.
The information learned today from Active Network is specific to Idaho.
Who is potentially affected?
Idaho residents and nonresidents who started buying hunting and fishing licenses and tags before 2008. Those who made their first license purchase after 2008 are not at risk.
Was my information stolen?
We won’t know. Active Networks can only confirm that it is possible.
What should I do?
Fish and Game recommends license buyers follow the advice of the Idaho Attorney General’s office and monitor their financial accounts and credit history for any signs of suspicious activity (see below).
What has Fish and Game done to protect my information?
Idaho Fish and Game has shut down the online license sales site where the breach occurred and it will remain shut down and will not be brought back up until an independent third party says it is safe to do so.
Can I still buy an Idaho hunting or fishing license and tag?
Yes, they are still available at about 400 businesses statewide and also at Fish and Game offices. The computer terminals used to sell licenses and tags at businesses and Fish and Game offices are separate from the online system.
What if I detect something suspicious with my accounts?
Call your local police department or sheriff’s office and file a report of identity theft. Get a copy of the police report. You may need to give copies of the report to creditors.
Whether any important personal information was obtained in the data breach, it’s a good reminder to be vigilant against identity theft. Here’s how:
- The Federal Trade Commission has a website to help you learn more about identify theft and prevention at www.consumer.gov/idtheft.
- Review your bank, credit card and debit card account statements and immediately report any suspicious activity to your bank, credit union or credit card company.
- Monitor your credit reports with major credit reporting agencies such as:
- Equifax, www.equifax.com, (800) 685-1111.
- Experian, www.experian.com, (888) 397-3742.
- Transunion, www.transunion.com, (800) 916-8800.