What does it mean that my card was compromised?
Data compromise also known as hacking occurs when an individual or group of individuals gain unauthorized access to a computer system for the purpose of corrupting or stealing data. When you use your card at a merchant such as a store, gas station, over the internet or on the phone, your debit card information is recorded into a database that is retained by the merchant for a period of time. The retained information is typically card numbers, expiration dates, and names. The unauthorized individuals may gain access to this information that is stored and may use it to perform fraudulent activity with your debit card information.

What information was compromised on my debit card?
The only information that is encoded on your debit card is your name, debit card number (which is not your Wainwright Bank checking or savings account number) and the expiration date. Any accounts linked to your debit card are not revealed to a merchant when you make purchases, ATM withdrawals or point of sale transactions.

Could the bank have prevented this incident?
The bank has no control over where you use your card and how the merchants store your information. Each merchant must attempt to protect customer's information by ensuring that your information is secure. The bank does protect our customers by reissuing new cards immediately when we are notified by Visa to reduce the chance of any fraudulent activity occurring on your account.

How do you know that my card was effected?
The undisclosed merchant works with Visa in identifying customers that may have been compromised. We receive the list from Visa that identifies which card numbers were effected.

How long will it take for me to receive a new card?
It usually takes 7-10 business days to receive a new card. You will receive a new pin mailer separately for the new card. The pin mailer will reveal your new pin number. If you would like to change your four digit PIN number, you must visit one of ATM machines. The customer should use their current card until they receive the new one.

What should I do with my old card?
Once the new card arrives, you should destroy the old compromised card. The bank will place a restriction on the card once we know our customers have received their new cards.

Why don't you disclose the name of the merchant in the letter that you send me?
We never receive the names of the merchants involved. We receive a list indicating that an undisclosed merchant’s database was compromised. The merchant is protected because law enforcement ultimately investigates the case. Once the case is closed, the merchant may be revealed at a later date.

What should I do if I think I am a victim of identity fraud?
Visit the Federal Trade Commission’s website for complete Identity Theft information and reporting instruction. Reporting consists of notify the proper authorities and credit bureaus.

The website address is:
http://www.ftc.gov/bcp/edu/microsites/idtheft.