Heartbleed Bug – Important Information About The Security of Your Data

FRT Admin
Site administrator
April 17, 2014

We have been closely monitoring the Heartbleed bug — a vulnerability to a version of OpenSSL security encryption software commonly used by websites around the world. In response to this bug, all servers containing confidential data were inspected and reviewed for vulnerability by FRT’s managed security services providers. The result of the review process is a clean bill of health as it pertains to Heartbleed. No confidential information contained within FRT’s systems, including trading histories, has been exposed.

FRT’s Online Client Portal is the only application with potential exposure to Heartbleed. FRT emphasizes that the client portal is logically and physically separate from its primary database and claim processing application. Confidential information and trading histories are not stored on the client portal. Therefore confidential information and trading histories remain secure.

The risk to the Online Client Portal, though quite remote, involves information that passes through servers maintained by the vendor hosting the FRT Online Client Portal site. The vendor responded promptly to this threat by installing a security patch before news of the bug was made public, and they continue to evaluate and address potential risks.

To secure the Online Client Portal against future exposure to Heartbleed, FRT has taken the additional measure of rekeying its SSL certificate, at the recommendation of the hosting service for the site. Though we have no information to suggest that your password for the Online Client Portal has been compromised, we recommend FRT Client Portal users take the following steps out of an abundance of caution:

  • Change your password in your account profile, by logging into FRT’s Online Client Portal and navigating to the “Manage Account” page.

We further encourage portal users to practice safe Web usage at all times by changing login information periodically. Always use strong passwords that contain a combination of uppercase letters, lowercase letters, numbers and symbols, and use unique passwords for different sites.

Financial Recovery Technologies maintains aggressive and multi-layered information security protocols, all of which are designed to protect our clients. We will continue to monitor this situation very closely, and take all necessary steps to safeguard your data.

ABOUT FINANCIAL RECOVERY TECHNOLOGIES
SETTLED  I  NON-US GLOBAL OPT-IN  I  ANTITRUST  I  GLOBAL PASSIVE  I  DIRECT OPT-OUT  I  BUYOUTS

Founded in 2008, Financial Recovery Technologies (FRT) is a leading technology-based services firm that helps the investment community identify eligibility, file claims and collect funds made available in securities and other class action settlements. Offering the most comprehensive range of claim filing and monitoring services available, we provide best-in-class eligibility analysis, disbursement auditing and client reporting, and deliver the highest level of accuracy, accountability and transparency available. For more information, go to www.frtservices.com.

 

This communication and the content found by following any link herein are being provided to you by Financial Recovery Technologies (FRT) for informational purposes only and does not constitute advice. All material presented herein is believed to be reliable but FRT makes no representation or warranty with respect to this communication or such content and expressly disclaims any implied warranty under law. Opinions expressed in this communication may change without prior notice. Firms should always seek legal and financial advice specific to their unique situation and objectives.