STATEMENT OF THE DONALD W. WYATT DETENTION FACILITY REGARDING NOVEMBER 2023 DATA SECURITY INCIDENT

On November 2, 2023, we discovered that a virus had impacted the Facility’s computer systems. We quickly took steps to minimize its impact, took other necessary actions to protect the Facility’s systems, and have been investigating the matter. We have been working with a forensic security expert to identify the nature and scope of the incident and the data taken from the Facility’s system. The FBI is also investigating this incident.

Our investigation and review of the affected data has been completed, and over the course of our review of the affected data, we have identified approximately 12,890 detainees, 7,618 current, potential, and former staff, and 185 outside vendors who have been affected. We believe that various types of data were taken from the Facility’s systems and posted on the dark web, including, but not limited to, certain financial information, certain detainees’ medical information, certain current, potential, and former staff information, such as beneficiary information and disciplinary/counseling information, certain vendor information, and certain incident reports. Some of this information included names, home addresses (city/state/zip), personal home/cellphone numbers, birth dates, hire dates, job titles, workers’ compensation/unemployment information, and in some, but not all, instances, Social Security numbers or taxpayer identification numbers. The Facility regrets any concern this incident may have caused, and we are committed to helping minimize any possible impact. Individuals affected by this incident have been or will be notified as required by law, and free credit monitoring will be offered to affected and eligible individuals.

(updated July 1, 2024)