STATEMENT OF THE DONALD W. WYATT DETENTION FACILITY REGARDING NOVEMBER 2023 DATA SECURITY INCIDENT

On November 2, 2023, we discovered that a virus had impacted the Facility’s computer systems. We quickly took steps to minimize its impact, took other necessary actions to protect the Facility’s systems, and have been investigating the matter. We have been working with a forensic security expert to identify the nature and scope of the incident and the data taken from the Facility’s system. The FBI is also investigating this incident.

Our investigation and review of the affected data is active and ongoing, and over the course of our review of the affected data from late November into March, we have identified at least 5,760 detainees, 3,644 current, potential, and former staff, and 185 outside vendors who have been affected. At this time, we believe that various types of data were taken from the Facility’s systems and posted on the dark web, including, but not limited to, certain financial information, certain detainees’ medical information, certain current, potential, and former staff information, such as beneficiary information and disciplinary/counseling information, certain vendor information, and certain incident reports. Some of this information included names, home addresses (city/state/zip), personal home/cellphone numbers, birth dates, hire dates, job titles, workers’ compensation/unemployment information, and in some, but not all, instances, Social Security numbers or taxpayer identification numbers. The Facility regrets any concern this incident may have caused, and we are committed to helping minimize any possible impact. Individuals affected by this incident are being notified as required by law, and free credit monitoring will be offered to affected and eligible individuals. Our review of the affected data is active and ongoing. If we discover additional individuals affected by the incident, we will send any required notices to those additional individuals, as well.

(updated March 25, 2024)