This is the verbiage we've been given to pass on to customers who have questions.
General Public Statement:
On February 23, we experienced a cybersecurity incident that has affected some of our internal communications, customer call centers, and internet sites. We immediately activated our incident response and business continuity plans to contain, assess and remediate the situation. We retained the services of cybersecurity experts and outside advisors to assist in the evaluation of the situation, and we notified appropriate law enforcement authorities.
On February 27, we became aware that certain data was extracted from our IT systems as part of this incident. It’s possible the investigation will reveal that the extracted data includes personal information. The forensic investigation and assessment of the impact of this incident is ongoing. The security of our customers’ data is important to us, and if we learn that information was compromised, we’ll take the appropriate steps and let any impacted customers know.
As a result of this incident, many of our customers are having trouble reaching our service desks, accessing their accounts, and making payments. We’re making progress on the customer service front every day, including ramping up our call capacity, but it will take a little time before things are fully restored. Our DISH TV, Sling TV, Wireless services, and data networks continue to operate and are up and running.
APPROVED REACTIVE MESSAGING REGARDING INCIDENT:
What happened?
- On February 23, we experienced a cybersecurity incident that has affected some of our internal communications, customer call centers, and internet sites. We immediately activated our incident response and business continuity plans to contain, assess and remediate the situation.
- On February 27, we became aware that certain data was extracted from our IT systems as part of this incident. It’s possible the investigation will reveal that the extracted data includes personal information.
- The forensic investigation and assessment of the impact of this incident is ongoing.
- The security of our customers’ data is important to us, and if we learn that information was compromised, we’ll take the appropriate steps and let any impacted customers know.
How did it happen?
- I don’t have an answer for you today. The forensic investigation and assessment of the impact of this incident is ongoing.
What was impacted?
- On February 23, we experienced a cybersecurity incident that has affected some of our internal communications, customer call centers, and internet sites. We immediately activated our incident response and business continuity plans to contain, assess and remediate the situation.
- As a result of this incident, many of our customers are having trouble reaching our service desks, accessing their accounts, and making payments. We’re making progress on the customer service front every day, including ramping up our call capacity, but it will take a little time before things are fully restored.
What are you doing about it?
- We immediately activated our incident response and business continuity plans to contain, assess and remediate the situation. We retained the services of cybersecurity experts and outside advisors to assist in the evaluation of the situation, and we notified appropriate law enforcement authorities.
Is my security at risk? Is my account safe?
- It’s possible the investigation will reveal that the extracted data includes personal information. The forensic investigation and assessment of the impact of this incident is ongoing. The security of our customers’ data is important to us, and if we learn that information was compromised, we’ll take the appropriate steps and let any impacted customers know.
- What are “appropriate steps”?
- I don’t have details today because the forensic investigation and assessment of the impact of this incident is ongoing.
Was data stolen?
- On February 27, we became aware that certain data was extracted from our IT systems as part of this incident. It’s possible the investigation will reveal that the extracted data includes personal information. The forensic investigation and assessment of the impact of this incident is ongoing. The security of our customers’ data is important to us, and if we learn that information was compromised, we’ll take the appropriate steps and let any impacted customers know.
- What are “appropriate steps”?
- I don’t have details today because the forensic investigation and assessment of the impact of this incident is ongoing.
Do I need to call my bank to cancel my credit cards, or change my passwords?
- The forensic investigation and assessment of the impact of this incident is ongoing. The security of our customers’ data is important to us, and if we learn that information was compromised, we’ll take the appropriate steps and let any impacted customers know.
- What are “appropriate steps”?
- I don’t have details today because the forensic investigation and assessment of the impact of this incident is ongoing.
When will you know what data was affected?
- These investigations take time and the assessment of the impact of this incident is ongoing.
- Our teams, along with external forensics experts, are working as quickly as possible to analyze the information.
- The security of our customers’ data is important to us, and if we learn that information was compromised, we’ll take the appropriate steps and let any impacted customers know.
When will things be fully restored?
- We’re making progress on the customer service front every day, including ramping up our call capacity, but it will take a little time before things are fully restored. Our DISH TV, Sling TV, Wireless services, and data networks continue to operate and are up and running.
What are you doing to restore systems?
- I don’t have that information but we did immediately activate our incident response and business continuity plans to contain, assess and remediate the situation.
Are you able to follow up with us when your systems are back online?
- Our teams are working around the clock to restore affected systems as quickly as possible, and we are making steady progress. We hope to have mydish.com back up and running soon. It will be updated with the latest information and will be the best place to get updates.
Supervisor request
- Since we’re taking so many calls, our supervisors that are staffed are taking calls with us. I’m empowered to help you with all options that are available right now.
What are you doing to keep this from happening again?
- As we work to bring affected systems back online, we are completing a full review of our security posture, and are making enhancements in the areas of network security, endpoint security and application security.
Billing/Account
Will I be charged any late fees for not being able to make a payment on time?
- When our systems are back up, we will review accounts for late fees that occurred while customers were unable to make payments, and those late fees will be removed.
I had a future-dated DISH Pause on my account. Will my account be credited for the time it remained active?
- When our systems are back up, we’ll review accounts for any fees that occurred during the systems issue.
Is there any information on my New Customer Offer?
- I’m unable to bring up your account to see the information. Once our operations are restored, you’ll be able to access your account online.
Wants to pay bill, will my service be shut off in the meantime?
- If you are affected, you will not lose your service while we’re resolving this issue. Thanks for being a valued DISH customer.
Trying to make changes to my service (cancel, other) and can’t.
- We’re sorry for the inconvenience. We'll be able to help you out as soon as our systems are back up, and we’ll work with you so you do not pay for additional days of service.
Technical
When will I be able to use my DISH passwords on ESPN, USA Network, NBC, AppleTV, ROKU, etc.?
- Our IT teams are working to restore the issue as fast as possible, and we’re making steady progress.
When will I be able to watch DISH Anywhere?
- We’re working to restore this as soon as possible. In the meantime, you can always use your in-home equipment (Hopper, VIP etc.). If you are not in the home, there is some content available on DISH Anywhere without logging in.
My technician never showed up/I never heard back about my technician appointment.
- I’m sorry that happened. I have a process to send a communication to the technician’s local office. From there, they will be able to work with you on a resolution.