; (iv) the toll-free contact telephone numbers and addresses for the major consumer reporting agencies; (v) a toll-free telephone number and Internet website address for the Commission whereby the individual may obtain information regarding identity theft; and (vi) a toll-free telephone number and Internet website address for the Bureau whereby the individual may obtain information regarding identity theft and credit reports. (2) Substitute notification (A) Circumstances giving rise to substitute notification A person required to provide notification to individuals under subsection (a)(1) may provide substitute notification in lieu of the direct notification required by paragraph (1) if the person owns or possesses data in electronic form containing personal information of fewer than 1,000 individuals and such direct notification is not feasible due to— (i) excessive cost to the person required to provide such notification relative to the resources of such person, as determined in accordance with the regulations issued by the Commission under paragraph (3)(A); or (ii) lack of sufficient contact information for the individual required to be notified. (B) Form of substitute notification Such substitute notification shall include— (i) email notification to the extent that the person has email addresses of individuals to whom it is required to provide notification under subsection (a)(1); (ii) a conspicuous notice on the Internet website of the person (if such person maintains such a website)