Cardholders Kept in Dark After Breach
Some Banks Decline to Tell Customers Whether Accounts Were Compromised
By Mike Musgrove
Washington Post Staff Writer
Thursday, June 23, 2005; Page D05
Consumer advocates said credit card customers have been denied crucial information in the wake of a recent data breach, as some major banks are declining to tell cardholders whether their account may have been accessed by hackers.
In a security lapse disclosed by MasterCard International Inc. last week, 40 million credit card and debit card numbers were exposed to an intruder who gained access sometime last year through a credit-processing firm. An interagency group of federal banking regulators has begun an investigation into the incident.
Meanwhile, Internet security firm Secure Computing Corp. warned yesterday that a fresh appearance of an old e-mail scam appears to come from opportunistic fraudsters hoping to use fear about the recent data theft as a way to trick MasterCard customers into giving up their account information.
Companies such as J.P. Morgan Chase & Co., Citigroup Inc., American Express Co. and MBNA Corp. said that they are not automatically alerting their customers that their information may have been exposed but that they are more closely monitoring the accounts that may have been affected. The policy was reported yesterday on CNetNews.com.
Such credit-card-issuing banks said MasterCard and Visa have shared with them lists of account numbers that may have been compromised. Though such accounts may earn heightened scrutiny from the banks that issued them, customers may never know whether their account numbers were among those stolen by hackers....
http://www.washingtonpost.com/wp-dyn/content/article/2005/06/22/AR2005062202037.html