1:07 p.m., Sept. 2, 2010----The University of Delaware recently learned that the state of Delaware Office of Statewide Benefits' consultant, Aon Consulting, inadvertently included personal information of state pension recipients (Social Security Number, gender and date of birth) in a request for proposal (RFP) that the company prepared for the state. This document impacts state pension recipients. The personal information of University or state employees who currently are not receiving state pensions was not divulged.

Aon Consulting had prepared the RFP for the state of Delaware to solicit bids from insurance companies interested in providing vision benefits to employees and retirees of the state. The RFP was posted to the procurement section of the state website to allow interested bidders access to the proposal document. This information was posted for five days before state staff discovered and removed it.

Aon Consulting has mailed letters to approximately 22,000 potentially affected state pension retirees with further details about the situation. Aon will provide one year of free credit monitoring through Experian, a leading global credit monitoring company.

Aon Consulting has also set up a customer care toll-free line at 866-623-6047. The phone lines will be open from Monday to Friday, 8 a.m.-8 p.m.

The state Office of Management and Budget, along with representatives from the Delaware Department of Technology and Information, the Office of the Attorney General and the State Pension Office, are overseeing the steps Aon is taking to support individuals affected by this incident and prevent future incidents of this nature.

Federal laws and regulations govern the safeguarding of personal, non-public information (PNPI), such as Social Security Numbers (SSNs).

The Family Educational Rights and Privacy Act (FERPA) [educational records], Gramm-Leach-Bliley Act (GLBA) [financial institution and customer data], and Health Insurance Portability and Accountability Act (HIPAA) [health information] all require those who collect PNPI to follow strict guidelines. Protecting information is important because of the risk of identity theft occurring.

For more information about the measures that the University of Delaware has taken to protect Personal Non-Public Information, see the website.

See press releases from the Delaware Office of Management and Budget and Aon Consulting for further information about this incident.

If you have questions about the impact of this breach, please contact the Delaware Office of Pensions at 800-722-7300 or call the Aon Consulting customer care toll-free line at 866-623-6047.