40 million credit cards compromised

Saturday, June 18, 2005 

MasterCard International announced Friday that multiple instances of fraud have been tracked back to CardSystems Solutions, Inc., a company that processes credit card transactions and other payments. Customer names, banks, and account numbers of up to 40 million cardholders have been exposed, of which about 13.9 million are MasterCard-branded cards, the company said. Visa and American Express cards were also affected.

"The breach appears to be the largest yet involving financial data," said David Sobel, of the Electronic Privacy Information Center.

CardSystems issued a statement late on Friday that said it learned of the potential breach 26 days ago, but that the FBI told the company not to advise the cardholders nor the public at large. CardSystems also said their statement had been vetted by the FBI.

A spokesperson for the FBI said that the agency had asked CardSystems not to disclose information that could compromise the investigation, but that it had not asked CardSystems to fail to disclose the breach at all.

Michael A. Brady, C.F.O. of CardSystems, told the Associated Press that "we're absolutely blindsided by a press release by the association," when speaking of MasterCard's release. A MasterCard spokesperson said that the company was obligated to inform its customers of the breach.

MasterCard spokesperson Sharon Gamsin said that CardSystems was hit by a virus-like computer script that stole customer data for the purpose of fraud. She said MasterCard does not know how the script got into the CardSystem network.

Sobel said this theft "indicates that this is a shadowy industry where the consumer never really knows who is going to be handling and using their personal information. Presumably, the affected consumers thought they were dealing with MasterCard." Having a third-party process credit card transactions is common practice in the industry.

Sources

• Joe Bel Bruno. "Security Breach Could Expose 40M to Fraud" — Associated Press, June 17,2005

The link above has been redirected(assumably by Yahoo) to a more recent article.

The link below is the actual original article;

• Joe Bel Bruno. "Security Breach Could Expose 40M to Fraud" — Associated Press, June 17,2005

• Spencer Swartz. "MasterCard security breach could hit 40 mln cards" — Reuters, June 17,2005

• "CardSystems: FBI Said To Keep Quiet About Fraud Risk" — KTVU.com, June 17,2005

The text of this article has been released into the public domain. In the event that this is not legally possible, this article may be used for any purpose, without any condition, unless such conditions are required by law. This applies worldwide. Copyright terms on images, however, may vary, so please check individual image pages prior to duplication. Please note that this only applies to Wikinews content created prior to September 25, 2005. All content created after that date is released under a Creative Commons license which is mentioned at the bottom of each article. This is currently the Creative Commons Attribution 2.5 License.