Notice of Data Security Incident


Notice of Data Security Incident – Car Pool, LLC, Richmond, Mechanicsville, Midlothian
Richmond, VA– Car Pool, LLC (“Car Pool”) was informed on March 27, 2017 that our point-of-sale system experienced an intrusion in February. Our point-of-sale system is operated by a third-party platform provider and this provider experienced the intrusion.

To date, the investigation indicates that the intruder placed malware on the point-of-sale system, and by doing so gained access to our customers’ payment card data, including the cardholder’s first and last name, payment card number, and security code.

If you used a payment card at our Mechanicsville Turnpike location between February 23 and February 28, 2017, or at any of our other locations between February 23 and February 27, 2017, your payment card information may be at risk. Because we are unable to determine contact information for each customer whose information may be at risk, we are notifying our customers of this risk in this Substitute Notice.

What information was involved?
For those customers who used a payment card at our locations during the period specified above, the information the intruder had access to includes the cardholder’s first and last name, card number and security code.

What are we doing?
Car Pool has worked with our third-party platform provider to remove the malware from its systems and our provider is actively monitoring the platform to safeguard personal information.

We are offering one year of complimentary credit monitoring through Kroll to help alleviate any concerns affected customers may have. Our customers may visit the following website to enroll in this product: Our customers may also call 1-855-223-7528 if they have questions about this incident and for more information about the identity protection product.

What you can do?
To protect yourself from the possibility of identity theft, we recommend that you immediately contact your credit or debit card company and inform them that your card information may have been compromised, so that they can issue you a replacement card.  We suggest that you remain vigilant and review your banking and card statements as well as credit reports, and report any suspicious activity to the relevant financial institution.

You should promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, your state attorney general, and/or the Federal Trade Commission.  You can also contact these sources about steps you can take to avoid identity theft.

The Virginia Office of the Attorney General can be contacted at 202 North Ninth Street, Richmond, VA 23219, or at (804) 786-2071. The AG's website on identity theft can be found at

To contact the Federal Trade Commission and file a complaint, go to or call 1-877-ID-THEFT (877-438-4338).

You can also contact one of the three major credit bureaus to monitor your credit report for any suspicious activity, and for information about fraud alerts and security freezes. You can order a free copy of your credit report by visiting, calling 877-322-8228, or completing the Annual Credit Report Form on the Federal Trade Commission website at .

You should immediately notify the credit bureaus if your credit report shows anything suspicious. The credit bureaus can be contacted as follows:

Equifax Experian TransUnion
Phone: 800-525-6285
P.O. Box 740241
Atlanta, GA 30374
Phone: 888-397-3742
P.O. Box 9532
Allen, TX 75013
Phone: 800-680-7289
P.O. Box 6790
Fullerton, CA 92834

For more information.
If you have questions regarding this incident please call 1-855-223-7528, Monday through Friday from 8:00 a.m. to 5:00 p.m. Central Time.

We take consumers’ privacy very seriously and are doing everything in our power to enhance our systems and security processes and to ensure that this type of incident will not again occur.

Contact: Mark Harrison, Car Pool, LLC (804)-726-5405 Ext. 301