Did You Notify Consumer Credit Reporting Agencies?

___

□ Yes □ No If Yes, Date:

Any Other Breach Compliance Requirements Apply such as □ Yes □ No Federal?

If Yes, Explain:

Third Party Breach:

□ Yes □ No

If Yes, Third Party Name: ___

If Third Party Involved, When Did They Notify the

Agency:

If a delay then please attach the delay notification record along with supporting documentation. Was there a delay due to:

Law enforcement investigation. Reference to KRS 61.933 (3)(a)

An agency determines that measures necessary to restore the reasonable integrity of the data system cannot be implemented within the timeframe established and will delay the breach determination. Delay will need to be approved in writing from the Office of the Attorney General. Reference to KRS 61.933 (3)(b)

Section 3

Complete and submit at the conclusion of the investigation and any notice and resolution process.

Actions Taken to Resolve Breach:

Actions Taken to Prevent Additional Security Breaches in Future, if any:

A General Description of what Actions are Taken as a Matter of Course to Protect Personal Data from Security Breaches:

<div style="text-align: center;"><img src="imgs/img_in_image_box_3_27_2285_65.jpg" alt="Image" width="99%" /></div>

Any Quantifiable Financial Impact to the Agency Reporting the Security Breach:

KRS 61.931 to 61.934 - https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=43575 KRS 42.726 - https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55894