Heartland Breach: Colorado Bank Reports New Fraud

Credit EligibleAs a BankInfoSecurity.com annual member, this content can be used toward your membership credits and transcript tracking. Click For More Info

A Colorado bank has come forward to reveal that as many as 5,000 of its customers were at risk because of new fraudulent transactions tied to the Heartland Payment Systems data breach.

First National Bank of Durango, a $399 million institution, went public with the news on March 1, after several customers reported that their debit cards had fraudulent transactions on them.

"Please be aware that as a result of a security breach at Heartland Payment Systems, debit cards issued by the First National Bank of Durango may have been compromised," the bank announced. "To protect our customers, we have temporarily blocked all point of sale purchases. Debit cards will still work at the ATM. It is important to note that there was not a security breach at First National Bank of Durango, our systems remain secure. The breach occurred at a third party processor."

Additional staff was added by the bank to handle the front-end calls from customers.

Moni Grushkin, the bank's senior vice president, says the first customers to come forward late last week reported strange charges on their bills. As First National bankers met to discuss the situation, they heard from several more customers and their credit card processor that several debit cards had been compromised. Fewer than 20 customers had reported fraudulent charges by early this week.

First National says it has received a list of up to 5,000 card numbers, or one fourth of the debit cards it has issued, that may be compromised. No fraud amounts on the compromised cards were revealed.

Click to Get Updates on the Latest Information Security News

Company* Title* Email* Subscription Type: HTML Text Healthcare Enews General Healthcare Enews Blogs Enews Careers Enews Training Enews Webinars Enews Podcasts Enews White Papers Enews Government Enews General Government Enews Blogs Enews Careers Enews Training Enews Webinars Enews Podcasts Enews White Papers Enews Banking Enews General Banking Enews Blogs Enews Careers Enews Training Enews Webinars Enews Podcasts Enews White Papers Enews Credit Union Enews General Credit Union Enews Blogs Enews Careers Enews Training Enews Webinars Enews Podcasts Enews White Papers Enews Need Help?

Albert Gonzalez, the hacker who broke into Heartland's and other networks, was indicted and pled guilty to the crimes, but Grushkin speculates that his criminal partners didn't use these particular card numbers until media attention cooled down.

"This isn't just a First National problem," Grushkin says. "I'd be interested in hearing about other banks here that have been affected."