Granville Recreation District offering free credit monitoring services after phishing scam

After falling victim to a phishing scam late last year, the Granville Recreation District is now providing identity protection services and credit monitoring to nearly 250 people who may have had personal information compromised as part of the scam.

An Aug. 14 newsletter email states the department has not identify any actual misuse of personal information after a cyberthief gained limited unauthorized access to two employee email accounts.

"However, GRD cannot confirm or deny whether the threat actors viewed or removed any personal information," the email states. "Therefore, GRD has started providing notice of this incident to approximately 240 individuals out of an abundance of caution."

Executive Director Andy Wildman told The Advocate via email Aug. 28 that the district is providing 12 months of identity protection services and credit monitoring from Experian at no charge to the individuals who may have been affected.

After sending the Aug. 14 email to a wider audience, the district is mailing letters to the 240 affected people with more details about the incident and specifics on the identity protection and credit monitoring services, Wildman wrote.

If a person did not received the mailed letter, Wildman said their information was not affected.

The district determined who was affected by looking at affected employee email accounts and whether any personal information may have been viewable or accessible, Wildman said. He added that generally, these individuals are involved with the rec district's driving education program, such as driving education students and instructors.

Wildman said the potentially affected information varies depending on the individual, but generally it includes temporary driving certificates, driver permit numbers and information contained in W-9 or 1099 forms.

A cyberthief stole nearly $713,000 from a recreation district loan fund at Park National Bank in December that was supposed to pay The Shelly Co. for paving work at Wildwood Park on the west side of Granville and Raccoon Valley Park on the southeast side. The theft was discovered by district in January, according to The Reporting Project, the nonprofit news organization of Denison University’s Journalism program.

Once the theft was discovered, the village reported it to the FBI, attorney general and Granville Police Department. It also contacted TrustedSec, a cybersecurity company, to determine how it happened and determine how to ensure it won’t happen again, according to The Reporting Project.

Investigations are still ongoing and Wildman could not comment on the status.

The Reporting Project reported this spring that the recreation district's insurance is expected to cover $275,000 of the stolen money. Wildman said via email that the district continues to work with the parties involved to find a reasonable and amicable solution to cover the remaining balance.

mdevito@gannett.com

740-607-2175

This article originally appeared on The Columbus Dispatch: Granville Recreation District offering free credit monitoring services after phishing scam