Note:

If the unredacted (not truncated) SSNs for the potentially impacted individuals involved in the data breach are not readily available, the reporting employee/POC or BU data owner must research to determine the complete SSNs. After due diligence, if the unredacted SSNs for the potentially impacted individuals cannot be determined, the reporting employee/POC or BU data owner must email the *PII mailbox or contact IM at 267-466-0777.

The PGLD/IM and CSIRC Breach/Incident Reporting Forms provide an inventory of possible compromised data elements, the source of the data, whether the data was encrypted, and any other special factors that need to be considered, such as data being used in a criminal or grand jury investigation.

The Impacted Individuals and/or Business Excel Spreadsheet provides an inventory of the names and TINs of all the individuals potentially impacted by the data breach.