Notice of Data Security Incident

Johnson City, Tennessee (June 15, 2026) – Providence Academy is committed to protecting the privacy and

security of the personal information it maintains. Providence Academy is making individuals aware of a data

security incident that impacted the Providence Academy network environment. Although Providence Academy

has no evidence of financial fraud or identity theft directly related to this incident, Providence Academy is

making potentially affected individuals aware of the incident and steps that impacted individuals can take to

protect their personal information.


On November 18, 2025, Providence Academy learned that an unauthorized party accessed a limited number of

systems within its network. The unauthorized access occurred from on or about November 11, 2025, to on or

about November 18, 2025. Upon learning of this issue, Providence Academy immediately launched an

investigation and contained and secured the network. As part of the investigation, Providence Academy worked

very closely with third-party cybersecurity professionals experienced in responding to these types of incidents.

Providence Academy conducted an extensive forensic investigation and manual document review, and, through

these efforts, determined that certain personal information was included within the impacted data accessed

and/or acquired by the unauthorized party. Further, Providence Academy worked to identify the list of

potentially impacted individuals and the most recent contact information to notify these individuals. This

process was completed on or about on or about May 12, 2026.


The personal information contained within the potentially impacted data included first and last names and Social

Security numbers and/or taxpayer identification numbers, driver’s license numbers, medical treatment

information, medical diagnosis information, physical or mental condition, usernames and passwords, employee

identification numbers, financial account numbers without access information, passport numbers, dates of birth,

credit or debit card numbers without access information, mothers’ maiden names, student identification

numbers, United States military or other United States federally issued identification numbers, and medical

record numbers. The information impacted varied by individual.


Commencing on or about June 12, 2026, Providence Academy mailed written notification letters to individuals

whose information was determined to be involved in this incident, to the extent that valid mailing addresses

were available. Providence Academy is also providing complimentary credit monitoring services to individuals

whose Social Security numbers have been determined to be involved. For individuals who have questions or

need additional information regarding this incident, or to determine if they are impacted and are eligible for

credit monitoring, Providence Academy has established a dedicated toll-free response line at 1-888-500-5761.

The response line is available Monday through Friday, 9:00 a.m. to 9:00 p.m. Eastern Time, excluding holidays.


– OTHER IMPORTANT INFORMATION –

1. Placing a Fraud Alert on Your Credit File.

You may wish to consider placing an initial one (1) year “Fraud Alert” on your credit files, at no charge. A fraud

alert tells creditors to contact you personally before they open any new accounts. To place a fraud alert, call any

of the three (3) major credit bureaus at the numbers listed below. As soon as one credit bureau confirms your

fraud alert, they will notify the others.

Equifax

P.O. Box 105069

Atlanta, GA 30348-5069

https://www.equifax.com/personal/

credit-report-services/credit-fraud-

alerts/

(800) 525-6285


2. Consider Placing a Security Freeze on Your Credit File.

If you are very concerned about becoming a victim of fraud or identity theft, you may request a “Security

Freeze” be placed on your credit file, at no charge. A security freeze prohibits, with certain specific exceptions,

the consumer reporting agencies from releasing your credit report or any information from it without your

express authorization. You may place a security freeze on your credit report by contacting all three (3)

nationwide credit reporting companies at the numbers below and following the stated directions or by sending a

request in writing, by mail, to all three (3) credit reporting companies:

Equifax Security Freeze

P.O. Box 105788

Atlanta, GA 30348-5788

https://www.equifax.com/personal/cre

dit-report-services/credit-freeze/

(888) 298-0045

Experian Security Freeze

P.O. Box 9554

Allen, TX 75013

http://experian.com/freeze

(888) 397-3742

TransUnion Security Freeze

P.O. Box 160

Woodlyn, PA 19094

https://www.transunion.com/cr

edit-freeze

(888) 909-8872

In order to place the security freeze, you’ll need to supply your name, address, date of birth, Social Security

number and other personal information. After receiving your freeze request, each credit reporting company will

send you a confirmation letter containing a unique PIN (personal identification number) or password. Keep the

PIN or password in a safe place. You will need it if you choose to lift the freeze.


3. Obtaining a Free Credit Report.

Under federal law, you are entitled to one (1) free credit report every twelve (12) months from each of the above

three (3) major nationwide credit reporting companies. Call 1-877-322-8228 or request your free credit reports

online at www.annualcreditreport.com. Once you receive your credit reports, review them for discrepancies.

Identify any accounts you did not open or inquiries from creditors that you did not authorize. Verify all

information is correct. If you have questions or notice incorrect information, contact the credit reporting

company.


4. Additional Helpful Resources.

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission

(FTC) recommends that you check your credit reports periodically. Checking your credit report periodically can

help you spot problems and address them quickly.

If you find suspicious activity on your credit reports or have reason to believe your information is being

misused, call your local law enforcement agency and file a police report. Be sure to obtain a copy of the police

report, as many creditors will want the information it contains to absolve you of the fraudulent debts. You may

38308195.1also file a complaint with the FTC by contacting them on the web at www.ftc.gov/idtheft, by phone at 1-877-

IDTHEFT (1-877-438-4338), or by mail at Federal Trade Commission, Consumer Response Center, 600

Pennsylvania Avenue, NW, Washington, DC 20580. Your complaint will be added to the FTC’s Identity Theft

Data Clearinghouse, where it will be accessible to law enforcement for their investigations. In addition, you may

obtain information from the FTC about fraud alerts and security freezes.


If this letter states that your financial account information and/or credit or debit card information was impacted,

we recommend that you contact your financial institution to inquire about steps to take to protect your account,

including whether you should close your account or obtain a new account number.


If your personal information has been used to file a false tax return, to open an account or to attempt to open an

account in your name or to commit fraud or other crimes against you, you may file a police report in the City in

which you currently reside.


Maryland Residents: You may obtain information about avoiding identity theft from the Maryland

Attorney General’s Office: Office of the Attorney General of Maryland, Consumer Protection Division,

200 St. Paul Place, Baltimore, MD 21202, www.marylandattorneygeneral.gov, Telephone: 888-743-0023.


New Mexico Residents: You have rights pursuant to the Fair Credit Reporting Act, such as the right to be told

if information in your credit file has been used against you, the right to know what is in your credit file, the right

to ask for your credit score, and the right to dispute incomplete or inaccurate information. Further, pursuant to

the Fair Credit Reporting Act, the consumer reporting agencies must correct or delete inaccurate,

incomplete, or unverifiable information; consumer reporting agencies may not report outdated negative

information; access to your file is limited; you must give your consent for credit. In addition, you have the

right to obtain a security freeze (as explained above) or submit a declaration of removal. You have a right to

bring a civil action against a consumer reporting agency that violates your rights under the Fair Credit

Reporting and Identity Security Act. For more information about the FCRA, please visit

www.consumer.ftc.gov/sites/default/files/articles/pdf/pdf-0096-fair-credit-reporting-act.pdf or www.ftc.gov.


New York Residents: You may obtain information about preventing identity theft from the New York

Attorney General’s Office: Office of the Attorney General, The Capitol, Albany, NY 12224-0341; ag.ny.gov/

consumer-frauds-bureau/identity-theft; Telephone: 800-771-7755.

North Carolina Residents: You may obtain information about preventing identity theft from the North Carolina

Attorney General’s Office: Office of the Attorney General of North Carolina, Consumer Protection Division,

9001 Mail Service Center, Raleigh, NC 27699-9001, www.ncdoj.gov, Telephone: 877-566-7226 (Toll-free

within North Carolina), 919-716-6000.


Oregon Residents: You may obtain information about preventing identity theft from the Oregon

Attorney General’s Office: Oregon Department of Justice, 1162 Court Street NE, Salem, OR

97301-4096, www.doj.state.or.us, Telephone: 877-877-9392.

38308195.1