December 19, 2013
An estimated 40 million credit, debit and Target REDcards were compromised during a breach between November 27 and December 15 at Target stores throughout the United States. Some reports cite that 124 Target stores in Canada were also affected by the breach.
There are a number of reports circulating today, many of which are pure speculation or provide little remedial actions. Summarized below is a breakdown of known, validated details to date and some account handling tips.
Target has confirmed that between November 27 and December 15 potentially all in-store purchases using cards that were swiped at their Point of Sale (POS) system were compromised, including debit, credit and Target REDcards. At this time, reliable sources close to the investigation report PINs were not compromised as the suspected malware, known as Dexter, likely infected the company’s card processing mainframe, not the actual POS terminals where the card is swiped.
Target issued a statement today stating: “We have determined that the information involved in this incident included customer name, credit or debit card number, and the card’s expiration date and CVV (the three-digit security code).” CVV (or CVV1) is encoded into the mag stripe (Track 2) of a card and is used to validate the card during card-present transactions. The CVV is used by the Issuer to ensure the card is valid. Because this is a data breach involving card track data (i.e. mag stripe data), CVV1 data is likely part of the data compromised. Some media reports are indicating CVV2 was also compromised; however there is no evidence of that at this time. CVV2 is the security validation number on the back of the card near the signature line and is used for mail order, telephone order and Internet purchases. CVV2 is not on the mag stripe of a card, so this data shouldn’t have been compromised.
Our card holders are urged to closely monitor card activity if they shopped at Target during this timeframe, and report unauthorized transactions immediately to First American Bank. WE ALWAYS RECOMMEND OUR CUSTOMERS CLOSE CARDS INVOLVED IN A COMPROMISE AND OBTAIN A REPLACEMENT CARD. Please call our customer service team at 405.579.7000 or 800.522.1262, if your First American Bank debit card could be part of this breach.
Target issues debit cards with a financial incentive for consumers to sign up for their REDcard. The REDcard is tied to a consumer’s checking account; transactions settle via the ACH network. Notify Target if you have one these cards tied to your First American Bank account.
DEBIT CARD SECURITY ALERT!
With the holidays upon us, be aware of debit card fraud.
You don't have to lose your debit card to become a victim of debit card fraud. Thieves can obtain your debit card account numbers by scanning your card in illegal machines or by a merchant or processing provider breach.
There are many things you can do to avoid becoming a victim of debit card fraud. They include:
- Check your card statements for unfamiliar transactions (everyday, if possible)
- Always sign the back of your cards when they arrive in the mail. If you get duplicate cards for your account, sign the back and put them in a safe, secure place.
- Get your statements online
- Pick PIN numbers you can easily remember that are not birthday dates, house or phone numbers, or repetitions of a single number. Never write your PIN number down on a slip of paper that you keep in your purse or wallet.
- Get the receipts from your card transactions. If there are carbons, ask for them too.
- Be sure to get your card back when you use it for purchases. Also be sure you can see your card at all times when it's being used for a transaction.
- If you're shopping online, be sure the website you're visiting is secure (indicated by https://) before you enter your card number.
- Don't allow anyone else to use your credit or debit card and never co-sign for a card that will be used by another person without your supervision.
- If you notice your credit or debit card is missing, call First American Bank at (405) 579-7000 or (866)-546-8273 immediately to report it lost or stolen. If you act quickly, you can minimize the chance for fraudulent charges.
- Never give your credit or debit card account number to anyone you don't know over the computer or the phone.
- Know where your cards are at all times, and never leave your wallet or purse unattended - even for a minute.