Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: The North Highland Company LLC
  • Street Address: 3333 Piedmont Road, NE, Suite 1000
  • City: Atlanta
  • State, or Country if outside the US: GA
  • Zip Code: 30305

Submitted By

  • Name: Patrick Ray
  • Title: General Counsel
  • Firm name (if different than entity):
  • Telephone Number: 404-975-6602
  • Email Address: Patrick.Ray@northhighland.com
  • Relationship to entity whose information was compromised: In House Counsel

Breach Information

  • Total number of persons affected (including residents): 14761
  • Total number of Maine residents affected: 5
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 05/26/2022
  • Date Breach Discovered: 06/28/2022
  • Description of the Breach:
    • Other, External system breach (hacking)
    • If other, please specify: We are writing to provide you with a follow-up notice to our July 28, 2022 notice regarding the North Highland incident. We have been identifying potentially impacted individuals in waves as we have been able to identify those individuals and their contact information. We notified current employees on July 8, 2022. On July 27, 2022 and August 10, 2022, we notified former employees dating back to approximately 2014 and dependent and beneficiaries of current and former employees that were designated in our benefits-related systems. We have now completed our investigation. We found an additional 2 residents of Maine since our last notice, resulting in a total number of 5 individuals affected in Maine for this incident. We have notified the additional 2 residents of Maine on August 10, 2022 and September 23, 2022. The sample breach letter sent to all additional residents is substantively the same as the sample notices we previously provided.
  • Information Acquired - Name or other personal identifier in combination with: Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 09/23/2022
  • Copy of notice to affected Maine residents: 2022-09-23 NHC_L05_Sample Letter.pdf
  • Date of any previous (within 12 months) breach notifications: This notice is a supplement to the notice submitted to your office on July 28, 2022
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24 Months, Experian IdentityWorks, report at signup, credit monitoring, identity restoration, up to $1 Million identity theft insurance