Notice of Data Breach

 

Western New Mexico University (“WNMU”) has completed an investigation of unauthorized activity involving its computer network.  Upon learning of the unauthorized activity, WNMU took immediate action to contain the incident, began an investigation with the assistance of a cybersecurity firm that has assisted other organizations in similar situations, and reported the incident to law enforcement. The investigation determined that an unauthorized person gained access to some WNMU systems between April 9, 2025, and April 13, 2025, and acquired copies of certain files.

WNMU reviewed the files that may have been involved, which took a substantial amount of time and effort, and on September 23, 2025, determined that they contained individuals’ names with one or more of the following: Social Security number, driver’s license or state identification number, government issued identification number, and/or financial account number.

To help prevent something like this from happening again, the WNMU has taken, and will continue to take, steps to enhance the security of its computer network.

WNMU is also offering a complimentary one-year membership in Experian® IdentityWorks℠ to individuals whose personal information may have been involved in the incident. This product helps detect possible misuse of your personal information and provides you with identity protection services focused on immediate identification and resolution of identity theft. IdentityWorks is completely free to you and enrolling will not hurt your credit score.

If you believe your personal information or that of a minor in your care may have been involved in this incident and you are interested in enrolling in the services, please see the information and instructions below.

For individuals over 18 years of age, to enroll in IdentityWorks, please contact Experian’s customer care team at (877) 288-8057 or visit https://www.experianidworks.com/credit and provide engagement number B154167 and enrollment code TT9JV2YN2. The deadline to enroll is January 31, 2026.

  • Details Regarding the Experian IdentityWorks Membership
    A credit card is not required for enrollment in Experian IdentityWorks. You can contact Experian immediately regarding any fraud issues, and have access to the following features once you enroll in Experian IdentityWorks:
    • Experian credit report at signup: See what information is associated with your credit file. Daily credit reports are available for online members only.*
    • Credit Monitoring: Actively monitors Experian file for indicators of fraud.
    • Identity Restoration: Identity Restoration specialists are immediately available to help you address credit and non-credit related fraud.
    • Experian IdentityWorks ExtendCARETM: You receive the same high-level of Identity Restoration support even after your Experian IdentityWorks membership has expired.
    • Up to $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized electronic fund transfers.

* Offline members will be eligible to call for additional reports quarterly after enrolling.

** The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

For individuals under 18 years of age, to enroll in IdentityWorks, a parent or guardian should contact Experian’s customer care team at (877) 288-8057 or visit https://www.experianidworks.com/minorplus and provide engagement number B154168 and enrollment code 6TXYRYG3Z. The deadline to enroll is January 31, 2026.

  • Details Regarding the Experian Identityworks Minor Plus Membership
    A credit card is not required for enrollment in Experian IdentityWorks. You can contact Experian immediately regarding any fraud issues, and have access to the following features once you enroll in Experian IdentityWorks:
    • Social Security Number Trace: Monitoring to determine whether enrolled minors in your household have an Experian credit report. Alerts of all names, aliases and addresses that become associated with your minor’s Social Security Number (SSN) on the Experian credit report.
    • Internet Surveillance: Technology searches the web, chat rooms & bulletin boards 24/7 to identify trading or selling of your personal information on the Dark Web.
    • Identity Restoration: Identity Restoration specialists are immediately available to help you address credit and non-credit related fraud.
    • Experian IdentityWorks ExtendCARETM: You receive the same high-level of Identity Restoration support even after your Experian IdentityWorks membership has expired.
    • Up to $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized electronic fund transfers.

** The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

We remind individuals that it is always a good idea to be vigilant for incidents of fraud or identity theft by reviewing account statements and free credit reports for any unauthorized activity. Please also review the Additional Steps You Can Take information below.

We apologize for any concern or inconvenience this incident may cause. We have established a dedicated, toll-free call center to answer questions that individuals may have about the incident. If you have questions, please call 877-841-0976, available Monday through Friday, 9:00 a.m. to 5:00 p.m. Mountain Time, excluding some major U.S. holidays.

ADDITIONAL STEPS YOU CAN TAKE

We remind you it is always advisable to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity over the next 12 to 24 months. You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting companies is as follows:

If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your state. You can obtain information from these sources about steps an individual can take to avoid identity theft as well as information about fraud alerts and security freezes. You should also contact your local law enforcement authorities and file a police report. Obtain a copy of the police report in case you are asked to provide copies to creditors to correct your records. Contact information for the Federal Trade Commission is as follows:

Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue NW, Washington, DC 20580, 1-877-IDTHEFT (438-4338), www.identitytheft.gov  

Fraud Alerts and Credit or Security Freezes: 

Fraud Alerts: There are two types of general fraud alerts you can place on your credit report to put your creditors on notice that you may be a victim of fraud—an initial alert and an extended alert. You may ask that an initial fraud alert be placed on your credit report if you suspect you have been, or are about to be, a victim of identity theft. An initial fraud alert stays on your credit report for one year. You may have an extended alert placed on your credit report if you have already been a victim of identity theft with the appropriate documentary proof. An extended fraud alert stays on your credit report for seven years.

To place a fraud alert on your credit reports, contact one of the nationwide credit bureaus. A fraud alert is free. The credit bureau you contact must tell the other two, and all three will place an alert on their versions of your report. 

For those in the military who want to protect their credit while deployed, an Active Duty Military Fraud Alert lasts for one year and can be renewed for the length of your deployment. The credit bureaus will also take you off their marketing lists for pre-screened credit card offers for two years, unless you ask them not to.

Credit or Security Freezes: You have the right to put a credit freeze, also known as a security freeze, on your credit file, free of charge, which makes it more difficult for identity thieves to open new accounts in your name. That is because most creditors need to see your credit report before they approve a new account. If they cannot see your report, they may not extend the credit.

How do I place a freeze on my credit reports? There is no fee to place or lift a security freeze. Unlike a fraud alert, you must separately place a security freeze on your credit file at each credit reporting company. For information and instructions to place a security freeze, contact each of the credit reporting agencies at the addresses below:

You will need to supply your name, address, date of birth, Social Security number and other personal information. 

After receiving your freeze request, each credit bureau will provide you with a unique PIN (personal identification number) or password. Keep the PIN or password in a safe place. You will need it if you choose to lift the freeze.

How do I lift a freeze? A freeze remains in place until you ask the credit bureau to temporarily lift it or remove it altogether. If the request is made online or by phone, a credit bureau must lift a freeze within one hour. If the request is made by mail, then the bureau must lift the freeze no later than three business days after getting your request.

If you opt for a temporary lift because you are applying for credit or a job, and you can find out which credit bureau the business will contact for your file, you can save some time by lifting the freeze only at that particular credit bureau. Otherwise, you need to make the request with all three credit bureaus.

A Summary of Your Rights Under the Fair Credit Reporting Act: The federal Fair Credit Reporting Act (FCRA) promotes the accuracy, fairness, and privacy of information in the files of consumer reporting agencies. There are many types of consumer reporting agencies, including credit bureaus and specialty agencies (such as agencies that sell information about check writing histories, medical records, and rental history records). Your major rights under the FCRA are summarized below. For more information, including information about additional rights, go to www.consumerfinance.gov/learnmore or write to: Consumer Financial Protection Bureau, 1700 G Street N.W., Washington, DC 20552. 

  • You must be told if information in your file has been used against you.
  • You have the right to know what is in your file.
  • You have the right to ask for a credit score.
  • You have the right to dispute incomplete or inaccurate information. 
  • Consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable information.
  • Consumer reporting agencies may not report outdated negative information.
  • Access to your file is limited.
  • You must give your consent for reports to be provided to employers.
  • You may limit “prescreened” offers of credit and insurance you get based on information in your credit report.
  • You have a right to place a “security freeze” on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization.
  • You may seek damages from violators.
  • Identity theft victims and active-duty military personnel have additional rights.