Notice of Security Incident

Faulkner University (“Faulkner”) is giving notice about a recent security incident that may have
involved the personal information of some individuals associated with the University and/or its
group health plan(s).

On or about April 18, 2022, Faulkner experienced a data security incident that caused disruption
to certain portions of our information technology network. The University immediately
investigated and aggressively responded to this incident. Outside technical experts were engaged to further investigate and evaluate the nature and scope of the incident. The University’s IT team is also working closely with these experts to remediate this event and to further harden the University’s defenses.

During the course of our investigation, on April 22, the University learned that unauthorized third
part(ies) may have accessed or potentially exfiltrated certain limited files from our IT
environment, and appropriate notices were made to individuals known at the time to have been
affected by this incident.

Since then, Faulkner has continued to investigate and work with third-party experts to determine
the full scope of this event in order to identify any additional individuals who may need to be
notified. As a result of those efforts, Faulkner learned on May 17 that certain files related to the
University’s group health plan(s) may also have been accessed and/or potentially exfiltrated in
connection with this incident on or around April 10 - 12.

While our investigation is ongoing, it appears at this time that some of the impacted files may
have contained the personal information of certain individuals associated with the University
and/or its group health plans. The information affected varies by individual and in some cases
included name, address, date of birth, demographic and/or health-related information, and other
information commonly found in medial / billing records. For some individuals, the personal
information involved included a Social Security number, and these individuals are being provided
complimentary credit monitoring and identity theft protection services as required by law.

While there is no evidence that any personal information has actually been used inappropriately,
it is recommended that all individuals generally, and as affected by this incident, closely monitor
financial account statements and credit reports and report any discrepancies to law enforcement.

As a precaution, Faulkner also recommends individuals review statements received from their
healthcare providers and health insurer(s) and alert the provider or insurer immediately of any
charges for services not received. Additional guidance that consumers can take to protect
themselves can be found at: https://www.consumer.ftc.gov/features/feature-0014-identity-theft .

Faulkner takes seriously the security and privacy of personal information entrusted to us, and we
deeply regret that this incident occurred and any concern this may cause.

If you are concerned your information was involved in this incident, please call toll-free (888)
548¬2226 between the hours of 8:00 am and 5:00 pm, Central Time, Monday - Friday
(excluding major U.S. holidays).