PII Frequently Asked Questions

7/1/2021

What happened?
Roughly 17,000 City of Tulsa active or former employees were impacted by a data breach that included the leak of personally identifiable information (PII) to the dark web by the persons responsible for the May 2021 ransomware attack.

What personal information was shared?
The personal information shared contained names, addresses, email addresses, and social security numbers.

Which City employees were impacted?
Employees, retirees, and terminated/resigned employees who were on payroll files in 2017 were included in the data breach. This includes employees of other agencies on the City of Tulsa’s payroll system, such as INCOG and River Parks.

How can I check to see whether my information was shared?
Any employee, retiree or terminated/resigned employee can check to see what information was shared by inputting their name and last four digits of their social security number at: https://www.cityoftulsa.org/apps/ExposureLookup/

What should I do if my name changed?
If your name was different in 2017, or if you changed names that year, try searching with both of those names.

Was any dependent (spouse, child, etc.) information leaked?
No. Only direct employee information was leaked.

Are you offering any free credit monitoring services?
The City of Tulsa is making known multiple available credit monitoring options. Both the state and federal government recommend monitoring your credit with the three major credit bureaus, which can be don free of charge. You can obtain your free credit reports at https://annualcreditreport.com. It’s also a good idea to check with all of your financial institutions that you use and ask about the available credit/identity theft monitoring options they provide, as many provide free tools to protect your credit.

With Equifax, you can create an Initial Fraud Alert, which is free and lasts one year. When you sign up for this 1-Year Fraud Alert, Equifax will alert the two other major credit bureaus, namely TransUnion and Experian. To get started, visit: https://www.equifax.com/personal/credit-report-services/credit-fraud-alerts/
June 30, 2021

Another helpful service with important information can be found at: https://IdentityTheft.gov/DataBreach

What are other steps I can take to protect my information?
You can start by more closely monitoring your financial accounts and credit reports. You can order a free credit report at https://annualcreditreport.com. You might also consider placing a free credit freeze, which makes it harder for someone to open a new account in your name, or a fraud alert, which requires a business to verify your identity before issuing new credit in your name. You can learn more about credit freezes and fraud alerts at https://www.consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts.

Does the Blue Cross Blue Shield of Oklahoma Identity Protection Services work for non-members?
No, and the City is aware there are City employees who are not on Blue Cross plans. In this case, check with your specific plan provider on whether they offer identity theft protection services. Everyone can monitor their credit and issue fraud alerts with the three major credit bureaus free of charge.