Credit card breach hits Maine accounts Bangor Savings, Credit Union affected

Credit card breach hits Maine accounts Bangor Savings, Credit Union affected


Fallout from Heartland security breach widens
By Meg Haskell
BDN Staff
BANGOR, Maine — The impact in Maine of a security breach reported in January by Heartland Payment Systems of New Jersey is widening. On Thursday, Bangor Federal Credit Union confirmed that personal information from more than 3,000 credit and debit cards it issued has been compromised and Bangor Savings Bank said about 18,000 of its card holder accounts have been violated so far.

Both institutions said no money has been lost, however.

“The information is just trickling in,” said Yellow Light Breen, spokesman for Bangor Savings Bank. “It’s still very early; we think there will be a lot more.”

Heartland Payment Systems processes credit and debit card transactions for at least 250,000 businesses nationwide. Breen said it is unclear how many Maine businesses contract with the company. But because Heartland is the fifth-largest payment processing company in the nation and specializes in the needs of small businesses, he said, “we think they have a very large market share in Maine.”

today's poll

Was your debit or credit card affected by the recent security breach?

Yes
No

That makes it likely that “a very large percentage of Maine card holders will be affected,” he said.

Breen said that despite the security breech, there has been no evidence of related fraudulent activity in Bangor Savings Bank accounts and the bank is not routinely issuing new cards. Account holders who report suspicious activity in a timely way are not liable for financial losses, he emphasized.

A financial industry spokesman said the breach is already affecting banks, credit unions and financial institutions across the state.

“The shakeout from this data breach is an ongoing thing,” said Jon Paradise of the Maine Credit Union League. “To various degrees, it is affecting all financial institutions and credit card companies.” Paradise said at least a dozen Maine credit unions have blocked accounts and reissued cards.

At the Bangor Federal Credit Union, president and chief executive officer Steve Clark said the first alert came last Tuesday, when he was notified that card information on 270 members had been accessed in the security breach. The next day, 100 more accounts were added to the tally, and by Tuesday of this week the number was more than 3,000.

“It’s frustrating,” Clark said. “As a player in the credit card industry, we’ve purchased the best enhancements to create and monitor security.” He stressed that while security has been compromised, there has been no recent evidence of fraudulent activity in Bangor Federal Credit Union accounts, though problems reported last fall may have been related to the Heartland breach.

Affected accounts have been blocked until new cards can be issued, Clark said. The process takes 10 to 14 days.

“This is not about Bangor Federal Credit Union,” Clark said. The problem is affecting the entire banking industry, credit card issuers and even flexible health spending accounts, he said. Clark’s own accounts have been breached, he added.

Breen said it is still safer to use debit and credit cards than to carry or mail cash or checks, and that banks, including Bangor Savings Bank, have invested heavily in computer software to detect and prevent fraudulent activity.

“This is just kind of a fact of modern life, unfortunately,” he said.

The financial industry is stressing the importance of consumers’ role in identifying security breaches.

“Be vigilant, know what your account should look like and watch for all types of activity,” Clark said. “Be vigilant, be looking at your accounts online or via the telephone, and watch your monthly statements.” Any suspicious activity should be reported immediately to the appropriate financial institution.

On the Web: www.2008breach.com

mhaskell@bangordailynews.net

990-8291
Not registered? Click here
E-mail this
Print this
Guidelines for posting on bangordailynews.com

Bangordailynews.com is pleased to offer a forum for readers to react to our stories, discuss them and provide additional information. We are reluctant to delete comments, but do reserve that right for those who abuse our forum. For more on using this site, please see our terms of service.

The primary rule here is pretty simple: Treat others with the same respect you'd want for yourself. What does that mean specifically? Here are some guidelines (see more):

Comments
20 comments on this item

Again why do I have to monitor my cc from any bank. They can't enter into agreements with companies that have security in place so I have to provide a self-security service. This is insane. Fine these banks a few times and it the problems will all go away.

FredRogers you must not understand that this was a security breach. You can fine the banks all you desire. If NASA and the NSA can be hacked into and breached then so can a bank or a company that process credit cards. There are some very smart people in this world and these types of attacks earn them millions of dollars and there is no such thing as a 100% secure network or server.

You should read Kevin Mitnick's book called The Art of Deception. He is a brilliant mind that was at one time one of the best hackers in the world. It will open your eyes into a world that you never knew existed and make you understand how these types of breaches can happen. The problem will not go away from simple fines and there will be more breaches such as this one in the coming moons.

I agree with Fred. Credit card banks seem to put more time and effort into screwing customers with fees and high interest rates then they do making sure they are secure. If you can't keep your system safe and secure, you have no business being in the business.

Mrstix do you not understand this was not the fault of the banks that issued credit cards. It was the fault of a hacker(s) who broke into the system. A credit card company that processed the transactions was compromised. Again, you can access fines to banks all you desire but these types of attacks will continue. It's that simple.

If the NSA or NASA cannot keep there computers safe how do you think a huge bank will? Where there is a will to make money there is a way in. Most of these attacks are from abroad where US law has no sort of jurisdiction.

As for your stupid statement that banks care to make more of an effort into screwing customers with fees and high interest rates you are an idiot. Banks do care about securing their networks and servers but again. Nothing is 100% secure and never will be. The locks on your door to your home or car are nothing but false senses of security as well are passwords.

Locks can be picked and passwords can be broken with enough time. I use my debit card and credit cards just as most do and I understand the risk behind it. You can always pay with cash for everything for most things in life. You are not forced to use a debit card or credit card with most transactions. Yes, a rental car will want a major credit card, that is the fact of renting a car but you can go to any store and pay with cash and unless your employer forces you to have direct despot you can go to the bank and cash your check.

This breach is not about banks not doing their job and for some reason two of you think it is.

you want safer ways to do banking ... go back to paper and a shredder!!!!!

Seaboard FCU had been breached as well..... Not sure if it is the same people, but we got letters last week...

Thank-you, Kevin, That is well put. With this economy built on credit instead of cash, it is understandable why people think it's the financial institutions faults for the breaches. In the old days, the banks and investment firms were seperate entities with the banks offering a whoping 4% iinterest on savings account. We have lost that and now are at the mercy of banks that have both investment and banking. Where there is convenience, there is a price to be paid. Sad but true, to bad more people couldn't put their money into savings accounts and to be able to save for those big purchases, but I'm afraid that has gone of the way of the dinosaurs.

I am getting tired of this.. Time to catch the crooks that do this... The huge banks are wasting the bailout money when the small banks could be utilizing it for security measures!

and it isn't just credit cards.. our debit cards were the ones that were flagged. I am going back to writing checks, that is still a bit safer I guess. I know it is not the banks fualt..but the processors fault... but they need to be like every other business and consumer.. protect your computers against viruses and hackers!

Writing checks isn't much safer,since your account number is right on the check. At least credit card fraud won't cost you much IF you report it right away. Unfortunately, in these times people have to keep an eye on their accounts. Most banks have websites that you can log on and look at activity on your account. We shouldn't have to do this, but we do have to. It's also in your best interest to use a paper shredder for everything, even credit card offers you don't want.

Seaboard FCU was not breached. The company that procesesses transactions for businesses that customers of the credit union used their cards at was. Please don't go spreading rumors.

I only wish that my bank had some way of notifying me via . e-mail, text, or automated phone message before they shut my card off. It's a pain in the butt to fill your tank go inside to pay and then find out your card was deactivated.

This is really getting to be a pain though. My mortgage company had an employee selling customer info including ss#'s and everything else, and mine was one of them. Basically they give you 2 years of free credit monitoring and thats it. If my idenity is stolen as a result of their employees actions, thats basically my problem from what they tell me.

Mr Fredrogers....If banks had to higher security agencies to watch all their cards above what their own fraud departments do then it was cost them money. And guess who has to pay for it? You, the customer. And most customers would call up and complain about the "extra fees" the bank is charging them.

Thank you boogyman and Kevin. I wish people would understand what happened and not go off half-cocked. Heartland payment systems was compromised not your local institution. Its not the fault of Bangor Savings Bank, Seaboard FCU, Bangor Federal Credit Union or any other local institution. Local institutions are affected by this just like the general public is. Their employees cards as you can see in the article are affected as well. Put the blame where it belongs, on the criminals who hack in and steal this information. The sad truth of this computer age is that theft like this happens. As it has been said, if NASA can get hacked into than anyone can.

You always get what you pay for. Seems Maine companies go to the low end companies that don't want to pay for internet security.

These companies need to be held accountable and more needs to be done to protect our accounts from fraudulent activity. How do we know how merchants protect our information and keep on top of the latest security technology? There was a news program last year that should someone in a car with a laptop driving through parking lots showing how this information is transferred wirelessly through either unencrypted networks or the store was using outdated technology. I have had my debit card comprimised three times in three years, for not even using it. We should be filing class action suits with these companies. What ever happened to the TJMaxx security breach from 2-3 years ago? My identity and card is comprimised and no one seems to care?!

Okay, I understand that there may always be security issues. What I don't understand is why Bangor FCU thinks it is okay to cancel my card without telling me!! This is the second time in 6 months they did this.

Buddhagrl----They cancelled your card so the people that got into your account couldn't use it !. I realize it is an embarrassment to go to pay for something and find out your card is not good , but would you rather have had thousands of dollars charged to your card by someone ? Carry some paper checks or cash, just in case. Sometimes the machines that you swipe your card in break down and you need to have another way to pay . I couldn't believe the man on last nights news that tried to pay for his cup of coffee with a credit card and it didn't work.... A CUP OF COFFEE ! Carry some change for heavens sake !!!

eastmainer, what are you like 60 or something?

"why, i remember when i was a kid they had these things called pennies. glorious they were. if we were lucky, we might save up a nickel and buy a candy bar"

Back a year ago there was a credit card security breach from another company in NJ. That handled Visa cards and mine was one of them. Lucky for Me, my husband had signed us up for Life Lock, and lord and behold someone did try to use my Visa card number lucky for me life lock caught it, but never found the person that was trying to use it. Since then every 6 months I place a fraud alert on all three credit-reporting agency. In case someone might have my credit information still. BTW. If you own a computer and if you buy things on line with your credit cards, the transactions can be in log files in the event cookie handler and or the Temp Internet folders. Or in your windows registry. That is how Hackers using malware gets your Private data. So make sure you have a good Virus block and clean your computer cookies and temp files at least once a week to help prevent maleware and back door intruders from getting and viewing your private online activity.

I received a letter yesterday from my credit union (Maine State Credit Union) informing me that my debit card was one which possibly was involved in the security breach, so it looks like many credit unions cards my have been affected. I keep a close watch on both my debit and credit card and have seen no suspicious activity. I use my debit card a lot, much more than cash, and I will continue to do so.

You must be logged in to post a comment. click here to log in.

Powered by: Creative Circle Advertising Solutions, Inc.