Target Credit/Debit Card Hacks - what to do?

Non-investing personal finance issues including insurance, credit, real estate, taxes, employment and legal issues such as trusts and wills

Re: Target Credit/Debit Card Hacks - what to do?

Postby jon-nyc » Sat Dec 21, 2013 11:51 am

I just got this from Chase:

Dear Chase Customer:
We're reaching out to let you know what we're doing to help protect your account after the data breach announced by Target on some credit and debit cards used at Target stores between November 27 and December 15.

Here's what you should know:
All your Chase cards have our Zero Liability Protection. That means you're not liable for unauthorized transactions you report to us.

You don't need to call us at this time unless you see transactions you don't recognize. We're using our sophisticated fraud-monitoring tools to look for abnormal spending and ATM patterns. That helps us block fraudulent transactions.

We'll let you know if we see unusual activity on your account.

We'll send you a new card if we determine that's necessary.
Here's what you should do:
Continue using your Chase card.

Monitor your account -- including using chase.com or Chase Mobile -- and let us know if you see any transactions you don't recognize.

Enroll in our free Account Alerts* in the "Customer Center" section at chase.com and we'll let you know about specific activity in your account.
As always, thank you for your trust.
Sincerely,




Which is consistent with what I planned to do anyway. Still, its odd knowing that your card info, including the 3 digit CCV, has in fact been taken by a gang of crooks, and not automatically getting a new card. I guess because there are 40MM of us it seems that it'll most likely be a while, if ever, before someone tries to use MY card.

Still you wonder what the gang will do - sell them in lots of 10,000? It seems like once you have a few hundred good card numbers, you've hit diminishing returns. Unless you find some automated way of turning transactions into cash immediately, which I suppose the banks will be really looking out for.
jon-nyc
 
Posts: 896
Joined: 15 Nov 2009
Location: New York

Re: Target Credit/Debit Card Hacks - what to do?

Postby mikep » Sat Dec 21, 2013 12:27 pm

I'm going to do absolutely nothing. It's the bank's risk not mine as I don't have to pay for fraudulent charges. I don't care if the bank loses money. If I am proactive it only encourages lax security and the status quo.
Maybe this will lead to more discounts for cash, which there should be given what banks charge to process CCs. Maybe the banks will charge more to process CCs as fraud rises which will lead to cash discounts and eliminate CC waste from the system.
Have more than one card to use as backup is probably the best you can do.
mikep
 
Posts: 3072
Joined: 22 Apr 2009

Re: Target credit card breach

Postby Sunny Sarkar » Sat Dec 21, 2013 12:48 pm

nhrdls wrote:If you purchased anything at target between Nov. 29 and Dec. 15...

Oh boy - I do not usually shop at Target, but did get something small just once during that window. Changing to a new card number will be a pain due to the automatic bill payments charged to the card.
“Our life is frittered away by detail. Simplify, simplify.” ― Henry David Thoreau
User avatar
Sunny Sarkar
 
Posts: 2231
Joined: 2 Mar 2007
Location: Flower Mound, TX

Re: Target credit card breach

Postby VictoriaF » Sat Dec 21, 2013 12:50 pm

Sunny Sarkar wrote:
nhrdls wrote:If you purchased anything at target between Nov. 29 and Dec. 15...

Oh boy - I do not usually shop at Target, but did get something small just once during that window. Changing to a new card number will be a pain due to the automatic bill payments charged to the card.


My sympathy, this is something I am dealing with now. And I have not even been to Target.

Victoria
Every joke has a bit of a joke. ... The rest is the truth. (Marat F)
User avatar
VictoriaF
 
Posts: 11649
Joined: 27 Feb 2007
Location: Black Swan Lake

Re: Target credit card breach

Postby BrooklynInvest » Sat Dec 21, 2013 12:53 pm

Not a Target shopper but just got hacked myself. No out of pocket costs but a rather embarrassing episode while christmas shopping.
BrooklynInvest
 
Posts: 15
Joined: 28 Jul 2013

Re: Target credit card breach

Postby texasdiver » Sat Dec 21, 2013 1:28 pm

NPR did an interesting story about how far behind we are in the US with respect to credit card technology and how the Europeans all put microchips in their cards that make them MUCH harder to copy and and steal. But they mentioned that the new Euro-cards with their high tech features only provide security for the physical use of the card and prevent the physical cloning of the card using the card number. They don't actually provide additional security for online shopping where much of the fraud occurs.

I think the real problem is that it is cheaper for big banks and big retailers to just eat the losses when this type of fraud occurs than to actually spend the billions it would take to re-engineer all the cards and all the POS credit card terminals to accommodate higher tech cards. And so we pay the price when our cards get hacked through no fault of our own, both in terms of the time and hassle required to change card numbers and in terms of all the fraudulent purchases that consumers don't actually catch (of which I but there is a HUGE amount).

Seems to me that the only solutions are: (1) something like mass actions by consumers such as a huge class action lawsuit against Target that will start forcing them and other merchants to get more serious about investing in security, or (2) action by the government to force banks and merchants to modernize. I'm not holding out hope for either to happen.
texasdiver
 
Posts: 856
Joined: 25 Jun 2009

Re: Target Credit/Debit Card Hacks - what to do?

Postby tfb » Sat Dec 21, 2013 4:26 pm

jon-nyc wrote:Still, its odd knowing that your card info, including the 3 digit CCV, has in fact been taken by a gang of crooks, and not automatically getting a new card.

The 3-digit security code printed on the card (CVV2) has not been taken. It's not on the magnetic stripe. You don't enter it into the card terminal. There is a CVV1 on the magnetic stripe. It's not the same as the 3-digit CVV2 code you are asked to provide when you buy online.
Harry Sit, taking a break from the forums.
User avatar
tfb
 
Posts: 6675
Joined: 19 Feb 2007

Re: Target Credit/Debit Card Hacks - what to do?

Postby tfb » Sat Dec 21, 2013 4:27 pm

1210sda wrote:I too have my debit card (Red card) linked to my WellsFargo acct.

RED card debit card requires a PIN. PINs weren't stolen. Nothing to worry about.
Harry Sit, taking a break from the forums.
User avatar
tfb
 
Posts: 6675
Joined: 19 Feb 2007

Re: Target Credit/Debit Card Hacks - what to do?

Postby Mudpuppy » Sat Dec 21, 2013 4:39 pm

1210sda wrote:
Delayed Gratification wrote:Appreciate the replies. Since mine was a debit card, I'm going to call Wells Fargo and request a new number for our debit cards. It seems like the likelihood for us to be one of the 40 million is low, but I'm going to play it cautious. If it was a credit card it'd be different.

Thanks again, DG


DG, I too have my debit card (Red card) linked to my WellsFargo acct.

I would be interested in what WF has to say.

What they should be saying is something along the lines of "Target uses your account number and routing number, not your Wells Fargo ATM number. Changing your Wells Fargo ATM card will not help."

What they will probably say is "sure, no problem" because it's easier to reissue the ATM card than to explain why changing the ATM card won't help.

Target debit RedCards convert the debit transaction at the register into an ACH transaction against your bank account on Target's back-end servers. So the information stolen off the magnetic stripe only can reach your bank account if it can get through Target's back-end servers. I think it's pretty safe to say at this point that Target won't let that happen, even if the hackers did have the PINs (and all indications are that they don't have the PINs).

However, if you want to prevent potential Target debit RedCard fraud on the bank side, you have to ask the bank to reject all Target ACH requests. That's how the Target debit RedCard transactions appear to your bank. It has nothing to do with your bank-issued ATM card.
Mudpuppy
 
Posts: 2500
Joined: 27 Aug 2011
Location: Sunny California

Re: Target Credit/Debit Card Hacks - what to do?

Postby Mudpuppy » Sat Dec 21, 2013 4:47 pm

jon-nyc wrote:Which is consistent with what I planned to do anyway. Still, its odd knowing that your card info, including the 3 digit CCV, has in fact been taken by a gang of crooks, and not automatically getting a new card. I guess because there are 40MM of us it seems that it'll most likely be a while, if ever, before someone tries to use MY card.

Still you wonder what the gang will do - sell them in lots of 10,000? It seems like once you have a few hundred good card numbers, you've hit diminishing returns. Unless you find some automated way of turning transactions into cash immediately, which I suppose the banks will be really looking out for.

1) The 3 digit CCV on the back of the card (or 4 digit on the front of the card for AmEx) was NOT stolen. That is the CCV2 number, and it is not stored on the magnetic stripe. What was taken is the CCV1 number, which is stored on the magnetic stripe and is only used by back-end software to differentiate from "card-swiped-at-register" purchases and purchases where the card number is entered manually.

2) The card information is already being sold on the black market, fetching upwards of $30 per number. The main site selling them earlier in the week allowed people to search through and select which profile of numbers they wanted to buy (e.g. you could buy just numbers from Los Angeles or even just numbers from Chase customers in Los Angeles). Some of the larger banks actually purchased a subset of their own numbers listed on the black market website to verify that the numbers were all used at Target during the time period in question. That site is down now, but surely another will pop up in its wake.

Finally, if you want to get accurate information about this breach, stop listening to mainstream media. They have messed up so many details (like confusing CCV1 with CCV2) and overblown so many implications that it's no better than listening to a tabloid anymore. Brian Krebs is the security researcher who broke the story, and his website will likely remain one of the best sources of information (as he has been for many skimming attacks in the past):

http://krebsonsecurity.com/
Mudpuppy
 
Posts: 2500
Joined: 27 Aug 2011
Location: Sunny California

Re: Target Credit/Debit Card Hacks - what to do?

Postby tfb » Sat Dec 21, 2013 4:55 pm

Mudpuppy wrote:Finally, if you want to get accurate information about this breach, stop listening to mainstream media. They have messed up so many details (like confusing CCV1 with CCV2) and overblown so many implications that it's no better than listening to a tabloid anymore.

Exactly! The mainstream media are experts in appealing to people's emotions though. They know the average consumers don't have the patience for details like CCV1 versus CCV2, card number versus PIN, etc.
Harry Sit, taking a break from the forums.
User avatar
tfb
 
Posts: 6675
Joined: 19 Feb 2007

Re: Target Credit/Debit Card Hacks - what to do?

Postby abuss368 » Sat Dec 21, 2013 5:54 pm

I have been monitoring our credit card. Knock on wood, so far so good.
John C. Bogle: "You simply do not need to put your money into 8 different mutual funds!" | | Disclosure: Three Fund Portfolio + REITs
User avatar
abuss368
 
Posts: 6110
Joined: 3 Aug 2009
Location: At the Beach

Re: Target Credit/Debit Card Hacks - what to do?

Postby Gleevec » Sat Dec 21, 2013 6:34 pm

Is it possible to cancel the debit card portion of my ATM/debit card (e.g. Chase, BoA, Wells Fargo) to make it just an ATM card?
Gleevec
 
Posts: 175
Joined: 3 Mar 2013

Re: Target Credit/Debit Card Hacks - what to do?

Postby Mudpuppy » Sat Dec 21, 2013 6:45 pm

Gleevec wrote:Is it possible to cancel the debit card portion of my ATM/debit card (e.g. Chase, BoA, Wells Fargo) to make it just an ATM card?

Technically possible yes, but it wouldn't help with this particular compromise. And it all depends on the policy at the bank as to whether they would cut just an ATM card instead of a check card.

And in general, ATM skimmers can be just as problematic as point-of-sale skimmers. The ATM skimmers also usually have some camera to capture the PIN. Read through the archives on Brian Krebs' page to see what I mean. So having just an ATM card would not protect you from similar attacks in the future.
Mudpuppy
 
Posts: 2500
Joined: 27 Aug 2011
Location: Sunny California

Re: Target credit card breach

Postby Mudpuppy » Sat Dec 21, 2013 7:42 pm

There's already a thread on this under the Personal Finance area: viewtopic.php?f=2&t=128666
Mudpuppy
 
Posts: 2500
Joined: 27 Aug 2011
Location: Sunny California

Re: Target Credit/Debit Card Hacks - what to do?

Postby LadyGeek » Sat Dec 21, 2013 8:29 pm

^^^ FYI - I merged a similar thread (which was in the Personal Consumer Issues forum) into here, which is in the Personal Finance (Not Investing) forum.

The topic crosses both security and personal finance, so I'm going with the earlier thread. You can tell each thread by the post's title of "Target credit card breach" or "Target Credit/Debit Card Hacks - what to do?."
To some, the glass is half full. To others, the glass is half empty. To an engineer, it's twice the size it needs to be.
User avatar
LadyGeek
Site Admin
 
Posts: 17674
Joined: 20 Dec 2008
Location: Philadelphia

Re: Target Credit/Debit Card Hacks - what to do?

Postby LadyGeek » Sat Dec 21, 2013 8:32 pm

Mudpuppy wrote:
Gleevec wrote:Is it possible to cancel the debit card portion of my ATM/debit card (e.g. Chase, BoA, Wells Fargo) to make it just an ATM card?

Technically possible yes, but it wouldn't help with this particular compromise. And it all depends on the policy at the bank as to whether they would cut just an ATM card instead of a check card.

And in general, ATM skimmers can be just as problematic as point-of-sale skimmers. The ATM skimmers also usually have some camera to capture the PIN. Read through the archives on Brian Krebs' page to see what I mean. So having just an ATM card would not protect you from similar attacks in the future.

Here's one article: The Biggest Skimmers of All: Fake ATMs — Krebs on Security

Posted earlier in the thread (now merged): Cards Stolen in Target Breach Flood Underground Markets — Krebs on Security
To some, the glass is half full. To others, the glass is half empty. To an engineer, it's twice the size it needs to be.
User avatar
LadyGeek
Site Admin
 
Posts: 17674
Joined: 20 Dec 2008
Location: Philadelphia

Re: Target Credit/Debit Card Hacks - what to do?

Postby likegarden » Sat Dec 21, 2013 8:51 pm

My short message seems to have been lost here. We also had bought from Target the last 3 weeks. But when we cancelled our credit card with Capital One we were told it would take them from 10-14 days to get us a new one (new CC number). In the mean time our old one is cancelled, so we will live via cash and checks.
likegarden
 
Posts: 1208
Joined: 26 Feb 2007

Re: Target Credit/Debit Card Hacks - what to do?

Postby Mudpuppy » Sat Dec 21, 2013 9:06 pm

likegarden wrote:My short message seems to have been lost here. We also had bought from Target the last 3 weeks. But when we cancelled our credit card with Capital One we were told it would take them from 10-14 days to get us a new one (new CC number). In the mean time our old one is cancelled, so we will live via cash and checks.

This is unfortunate, but given the shipping charges to do deliveries on Christmas Eve and Christmas day (likewise the following week with New Years), it is understandable. This is one of the reasons there is advice to have two rewards cards so you'll still have one handy if the other doesn't work for whatever reason.
Mudpuppy
 
Posts: 2500
Joined: 27 Aug 2011
Location: Sunny California

Re: Target Credit/Debit Card Hacks - what to do?

Postby VictoriaF » Sat Dec 21, 2013 9:22 pm

Mudpuppy wrote:
likegarden wrote:My short message seems to have been lost here. We also had bought from Target the last 3 weeks. But when we cancelled our credit card with Capital One we were told it would take them from 10-14 days to get us a new one (new CC number). In the mean time our old one is cancelled, so we will live via cash and checks.

This is unfortunate, but given the shipping charges to do deliveries on Christmas Eve and Christmas day (likewise the following week with New Years), it is understandable. This is one of the reasons there is advice to have two rewards cards so you'll still have one handy if the other doesn't work for whatever reason.


Based on the Krebs's article, a replacement card costs $5-$6. I wonder if banks are trying to minimize unnecessary card replacements--some people may request them without ever having visited a Target store.

Victoria
Every joke has a bit of a joke. ... The rest is the truth. (Marat F)
User avatar
VictoriaF
 
Posts: 11649
Joined: 27 Feb 2007
Location: Black Swan Lake

Re: Target Credit/Debit Card Hacks - what to do?

Postby VictoriaF » Sat Dec 21, 2013 9:27 pm

LadyGeek wrote:
Mudpuppy wrote:
Gleevec wrote:Is it possible to cancel the debit card portion of my ATM/debit card (e.g. Chase, BoA, Wells Fargo) to make it just an ATM card?

Technically possible yes, but it wouldn't help with this particular compromise. And it all depends on the policy at the bank as to whether they would cut just an ATM card instead of a check card.

And in general, ATM skimmers can be just as problematic as point-of-sale skimmers. The ATM skimmers also usually have some camera to capture the PIN. Read through the archives on Brian Krebs' page to see what I mean. So having just an ATM card would not protect you from similar attacks in the future.

Here's one article: The Biggest Skimmers of All: Fake ATMs — Krebs on Security

Posted earlier in the thread (now merged): Cards Stolen in Target Breach Flood Underground Markets — Krebs on Security


In another thread I described my experience with a compromised AMEX card. The thing that was surprising to me was that after the initial successful $16.xx purchase my card was not used. A natural thing would be to charge hundreds of dollars once the card was proven "clean."

Based on Krebs's article I am guessing what has happened. The market was so saturated with the card numbers stolen from Target that all other cards were put on hold. Even if another card shop was selling my number, potential customers were probably more interested in the clean stuff coming directly from Target. Another factor is that after a card is proven clean it takes time for someone actually to buy it from a card shop. I guess my AMEX was not very tempting.

Victoria
Every joke has a bit of a joke. ... The rest is the truth. (Marat F)
User avatar
VictoriaF
 
Posts: 11649
Joined: 27 Feb 2007
Location: Black Swan Lake

Re: Target Credit/Debit Card Hacks - what to do?

Postby Boonedog » Sat Dec 21, 2013 9:31 pm

Target is notorious for being lax on their security. Plus their always out of the super deals they advertise so I don't bother and go to Wally World. Always use credit cards at merchants like these with a POS (point of sale).
User avatar
Boonedog
 
Posts: 18
Joined: 24 Apr 2013

Re: Target Credit/Debit Card Hacks - what to do?

Postby goodenoughinvestor » Sat Dec 21, 2013 9:40 pm

Chase has announced that they are limiting the use of any of their debit cards that might have been compromised by the Target breach (about 2 million Chase customers): You can only withdraw up to $100/day and charge up to $300/day. Merry Christmas Shopping!

http://www.nytimes.com/2013/12/22/busin ... reach.html
goodenoughinvestor
 
Posts: 216
Joined: 9 Aug 2013

Re: Target Credit/Debit Card Hacks - what to do?

Postby jon-nyc » Sun Dec 22, 2013 12:52 pm

The second half of that announcement is that they'll be replacing them after Xmas. The limits are a stop-gap designed to hobble through the season.

Not this applies only to debit cards. Interesting that chase's actions are consistent with my own advice to the OP earlier in the thread.
jon-nyc
 
Posts: 896
Joined: 15 Nov 2009
Location: New York

Re: Target Credit/Debit Card Hacks - what to do?

Postby jon-nyc » Sun Dec 22, 2013 12:53 pm

@tfb and mudpuppy - thanks for the clarification.
jon-nyc
 
Posts: 896
Joined: 15 Nov 2009
Location: New York

Re: Target Credit/Debit Card Hacks - what to do?

Postby evelyn » Sun Dec 22, 2013 1:43 pm

I cancelled my Target debit card immediately and asked for a confirmation letter to be sent to me. No more debit cards for me. Ever. Cash!
evelyn
 
Posts: 17
Joined: 1 Nov 2011

Re: Target Credit/Debit Card Hacks - what to do?

Postby StormShadow » Sun Dec 22, 2013 3:51 pm

tfb wrote:
1210sda wrote:I too have my debit card (Red card) linked to my WellsFargo acct.

RED card debit card requires a PIN. PINs weren't stolen. Nothing to worry about.

I wouldn't be so sure of that.

http://www.fox19.com/story/24269704/wom ... get-breach

http://www.cnn.com/video/data/2.0/video ... .wfsb.html

Take precaution folks. Check your credit history report regularly and closely monitor your bank/credit card statements.
StormShadow
 
Posts: 254
Joined: 9 Feb 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby tfb » Sun Dec 22, 2013 4:53 pm

StormShadow wrote:
tfb wrote:
1210sda wrote:I too have my debit card (Red card) linked to my WellsFargo acct.

RED card debit card requires a PIN. PINs weren't stolen. Nothing to worry about.

I wouldn't be so sure of that.

http://www.fox19.com/story/24269704/wom ... get-breach

http://www.cnn.com/video/data/2.0/video ... .wfsb.html

Take precaution folks. Check your credit history report regularly and closely monitor your bank/credit card statements.

See previous posts about media's inability to report nuance.

Fox19 reports a woman said her bank account had unauthorized debits. She didn't say she used a REDcard debit card. She didn't say the unauthorized charges came through a debit network using a PIN. Regular debit card had unauthorized charges through the "credit" side, sure. Still no indication her PIN was stolen.

Same thing for the CNN story. 20-year-old woman had unauthorized debits. It showed a Visa debit card. Not REDcard debit card. Nothing was said about whether the unauthorized charges came through a debit network using a PIN.

Nuance matters.
Harry Sit, taking a break from the forums.
User avatar
tfb
 
Posts: 6675
Joined: 19 Feb 2007

Re: Target Credit/Debit Card Hacks - what to do?

Postby grabiner » Sun Dec 22, 2013 8:35 pm

VictoriaF wrote:Based on the Krebs's article, a replacement card costs $5-$6. I wonder if banks are trying to minimize unnecessary card replacements--some people may request them without ever having visited a Target store.


The last time this happened (at Discount Shoe Warehouse), my credit union made the opposite decision. Even though they had no evidence that my own MasterCard had been improperly used, they decided it would be safer, as well as more reassuring, to issue a new MasterCard to all customers at DSW than to deal with the fraudulent transactions.

I got the message from Chase that they are not reissuing cards. I'm not even sure whether my card was breached, as I shopped at Target in the evening on December 15. I did check my statement online and didn't find anything suspicious.

The fact that stolen card data is going for $30 suggests that the average stolen card is being used in more than $30 of fraudulent transactions, but the banks may not know which cards have been stolen until they are used; if 100 cards are possibly stolen and only one is used for $100, the cost to the bank of not replacing cards is $1.

(edited to fix typo)
Last edited by grabiner on Mon Dec 23, 2013 1:07 am, edited 1 time in total.
David Grabiner
User avatar
grabiner
Advisory Board
 
Posts: 12729
Joined: 21 Feb 2007
Location: Columbia, MD

Re: Target Credit/Debit Card Hacks - what to do?

Postby StormShadow » Mon Dec 23, 2013 12:59 am

tfb wrote:
StormShadow wrote:
tfb wrote:
1210sda wrote:I too have my debit card (Red card) linked to my WellsFargo acct.

RED card debit card requires a PIN. PINs weren't stolen. Nothing to worry about.

I wouldn't be so sure of that.

http://www.fox19.com/story/24269704/wom ... get-breach

http://www.cnn.com/video/data/2.0/video ... .wfsb.html

Take precaution folks. Check your credit history report regularly and closely monitor your bank/credit card statements.

See previous posts about media's inability to report nuance.

Fox19 reports a woman said her bank account had unauthorized debits. She didn't say she used a REDcard debit card. She didn't say the unauthorized charges came through a debit network using a PIN. Regular debit card had unauthorized charges through the "credit" side, sure. Still no indication her PIN was stolen.

Same thing for the CNN story. 20-year-old woman had unauthorized debits. It showed a Visa debit card. Not REDcard debit card. Nothing was said about whether the unauthorized charges came through a debit network using a PIN.

Nuance matters.

Just found out my sister had over $1,000 charged at a shop in Italy. :oops:

She doesn't own a RedCard, but did shop several times at Target during the indicated dates using a Bank of America credit card. Folks, monitor your credit card history! If you used your charge card at Target between Nov 27 and Dec 15th, then IMO you should cancel the card and have a new one made.
StormShadow
 
Posts: 254
Joined: 9 Feb 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby VictoriaF » Mon Dec 23, 2013 1:07 am

grabiner wrote:
VictoriaF wrote:Based on the Krebs's article, a replacement card costs $5-$6. I wonder if banks are trying to minimize unnecessary card replacements--some people may request them without ever having visited a Target store.


The last time this happened (at Discount Shoe Warehouse), my credit union made the opposite decision. Even though they had no evidence that my own MasterCard had been improperly used, they decided it would be safer, as well as more reassuring, to issue a new MasterCard to all customers at DSW than to deal with the fraudulent transactions.

I got the message from Chase that they are not reissuing cards. I'm not even sure whether my card was breached, as I shopped at Target in the evening on December 15. I did check my statement online and didn't find anything suspicious.

The fact that stolen card data is going for $30 suggests that the average stolen card is being used in more than $30 of fraudulent transactions, but the banks may not know which cards have been stolen until they are used; if 100 cards are possibly stolen and only one is used for $100, the cost to the bank of not replacing cards is $100.


The bank's economics depend on whether $100 is lost by the bank or by the merchant. And even if banks assume most of the loss related to fraudulent transactions, they probably don't want to recall their cards in the midst of the holiday shopping.

Victoria
Every joke has a bit of a joke. ... The rest is the truth. (Marat F)
User avatar
VictoriaF
 
Posts: 11649
Joined: 27 Feb 2007
Location: Black Swan Lake

Re: Target Credit/Debit Card Hacks - what to do?

Postby Mudpuppy » Mon Dec 23, 2013 1:12 am

StormShadow wrote:Just found out my sister had over $1,000 charged at a shop in Italy. :oops:

She doesn't own a RedCard, but did shop several times at Target during the indicated dates using a Bank of America credit card. Folks, monitor your credit card history! If you used your charge card at Target between Nov 27 and Dec 15th, then IMO you should cancel the card and have a new one made.

That's pretty poor fraud detection on BofA's part unless your sister makes a habit of overseas purchases. Unless BofA was the one that alerted your sister of the purchase attempt that is. Besides, she used a credit card and used it at Target during the affected period, so I'm sure it will be little hassle to get this reversed. It's the harder to prove cases of skimmed numbers that cause headaches, not something as big and splashy as this one.

I'm not going to panic too much at the moment. I only use credit cards and only those that have zero liability protection. For something as big and splashy as this, there will likely be blanket policies from the card issuers once Target gives the affected information to both the consumer and the card issuers. I'll keep an eye on things by logging in daily and checking my transactions, but I'm not going to instantly panic just because I used my AmEx during the affected period. If there is fraud that AmEx doesn't detect, then I'll give a call.

Otherwise, I'll wait this out to see if a) the card was actually part of the compromise (we really don't know the extent of the theft at the moment other than that it was potentially all swipes; we don't even know how it happened to make educated guesses at the scope) and b) if AmEx is going to reissue all affected cards anyways once the holidays are over.
Mudpuppy
 
Posts: 2500
Joined: 27 Aug 2011
Location: Sunny California

Re: Target Credit/Debit Card Hacks - what to do?

Postby StormShadow » Mon Dec 23, 2013 1:57 am

Mudpuppy wrote:
StormShadow wrote:Just found out my sister had over $1,000 charged at a shop in Italy. :oops:

She doesn't own a RedCard, but did shop several times at Target during the indicated dates using a Bank of America credit card.

That's pretty poor fraud detection on BofA's part unless your sister makes a habit of overseas purchases. Unless BofA was the one that alerted your sister of the purchase attempt that is. Besides, she used a credit card and used it at Target during the affected period, so I'm sure it will be little hassle to get this reversed. It's the harder to prove cases of skimmed numbers that cause headaches, not something as big and splashy as this one.

It was BofA who notified her of the charge as soon as it happened. They have since removed the charge from her record and gave her a new card number.
StormShadow
 
Posts: 254
Joined: 9 Feb 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby abuss368 » Mon Dec 23, 2013 11:45 am

Checked again. Knock on wood, so far so good. I will keep monitoring.
John C. Bogle: "You simply do not need to put your money into 8 different mutual funds!" | | Disclosure: Three Fund Portfolio + REITs
User avatar
abuss368
 
Posts: 6110
Joined: 3 Aug 2009
Location: At the Beach

Re: Target Credit/Debit Card Hacks - what to do?

Postby indyfish » Mon Dec 23, 2013 2:12 pm

It took me over 50 phone call attempts over 4 total days to get my Target Red debit card cancelled - but I finally was able to do it this morning. I may get the Red credit card at some point, but I'm not touching the debit card again.
indyfish
 
Posts: 11
Joined: 9 Jan 2013

Re: Target Credit/Debit Card Hacks - what to do?

Postby Savvy » Mon Dec 23, 2013 2:52 pm

We just cancelled our account (we had a debit card). Took about 15 phone calls in a ten minute span before one went through. Pretty painless 5-minutes of holding, 5-minute conversation with a nice gentleman. Cancellation is effective immediately.
Savvy
 
Posts: 185
Joined: 5 May 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby cherijoh » Mon Dec 23, 2013 3:37 pm

If you used your debit card, I would definitely ask for a new card, but I wouldn't bother for a credit card - unless you are NOT willing to review your charges closely. With a debit card, your account can be drained and you may have to wait a while to get it straightened out. With a credit card once you dispute a charge you don't have to pay the charge and it shouldn't count towards the balance subject to interest or against your credit limits. Plus the credit cards associated with major banks (e.g., BofA, Citi, Chase, etc.) have sophisticated algorithms to identify charges outside your normal spending pattern and can sometimes catch a fraudulent charge before it even gets posted to your account. Since they are on the hook for fraudulent charges, the credit card companies prefer to be proactive.
cherijoh
 
Posts: 787
Joined: 20 Feb 2007
Location: Charlotte NC

Re: Target Credit/Debit Card Hacks - what to do?

Postby jon-nyc » Fri Dec 27, 2013 2:57 pm

Target now says PINs were stolen, though they were encrypted.


www.twincities.com/business/ci_24802325 ... ompromised
jon-nyc
 
Posts: 896
Joined: 15 Nov 2009
Location: New York

Re: Target Credit/Debit Card Hacks - what to do?

Postby jdilla1107 » Fri Dec 27, 2013 11:44 pm

I give up. As a consumer, why do people care so much about this? Over 10 years, I have had fraudulent charges a handful of times and it took about 30 seconds on my CC's website to mark them as fraudulent and that was it.

This thread is not far off from someone suggesting to wear a tin foil hat.
jdilla1107
 
Posts: 390
Joined: 24 Jun 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby cbeck » Sat Dec 28, 2013 2:06 am

jdilla1107 wrote:I give up. As a consumer, why do people care so much about this? Over 10 years, I have had fraudulent charges a handful of times and it took about 30 seconds on my CC's website to mark them as fraudulent and that was it.

This thread is not far off from someone suggesting to wear a tin foil hat.


I agree. A huge non-problem.
cbeck
 
Posts: 174
Joined: 24 Jun 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby placeholder » Sat Dec 28, 2013 3:55 am

Bigger for debit card people since it can drain the account and bounce other payments/checks but that's more a good reason to not use those.
placeholder
 
Posts: 2232
Joined: 6 Aug 2013

Re: Target Credit/Debit Card Hacks - what to do?

Postby jdilla1107 » Sat Dec 28, 2013 11:29 am

placeholder wrote:Bigger for debit card people since it can drain the account and bounce other payments/checks but that's more a good reason to not use those.


An easy solution to this is to set your debit limit to be 3-5x less than what you normally keep in the account. So, if you normally keep 3k in checking, then set your debit limit at $500-1000.

If you need to make a big purchase, then you can just call.

Using a credit card for everything also works.
jdilla1107
 
Posts: 390
Joined: 24 Jun 2012

Re: Target Credit/Debit Card Hacks - what to do?

Postby runner9 » Mon Jan 06, 2014 5:35 pm

So, out of the blue, with no contact previously in either direction, we recevied new Fidelity Cash Rewards AMEX cards in the mail today. The old card #s will be deactivated on January 20.

I had been balanced our activity in real life to the activity shown online weekly with no issues. So, good news is we have 2 weeks to make the switch, bad news is I now have to compile what gets automatically billed to that account and change it....urgh.
User avatar
runner9
 
Posts: 1038
Joined: 2 Aug 2011

Re: Target Credit/Debit Card Hacks - what to do?

Postby cheapskate » Thu Jan 23, 2014 10:38 pm

Just a heads up.

My wife shopped at Target lots of times when the thieves were stealing credit card numbers of shoppers.

Today, 4 different fraudulent charges (at Brick and Mortar stores in PA) were made on her CC (each charge was for just under $300). We live in CA, so the credit card company's fraud protection alerts instantly kicked in. The card was blocked (and now canceled). So it appears, the thieves are actively selling the card numbers they stole.

It is probably a good idea to proactively cancel your cards before anything bad happens if you believe your credit or debit card number may have been compromised. At the end of the day the customer is not responsible for these fraudulent charges, but cancelling the cards and getting new ones re-issued just seems like a good precaution and will avoid headaches and time spent on phone with the fraud department of your credit card company.
cheapskate
 
Posts: 562
Joined: 26 Apr 2007

Re: Target Credit/Debit Card Hacks - what to do?

Postby oaksavannah » Thu Jan 23, 2014 11:13 pm

I reported the fradulent charge I found on my Target credit card to Target and they cancelled the card and are sending a new one. I contacted Experian to have a credit freeze (also called a security freeze) so that new cards, loans, etc cannot be issued in my name. For Virginia residents, Experian charges $20. That will another $20 for my wife, plus I have to contact Transunion and Equifax separately and probably they will charge something also. What a racket.
oaksavannah
 
Posts: 20
Joined: 25 Nov 2012

Previous

Return to Personal Finance (Not Investing)

Who is online

Users browsing this forum: barnaclebob, Bing [Bot], letsgobobby, samsoes and 104 guests