The 203,000-member, $4.7 billion Bethpage Federal Credit Union in Bethpage, N.Y. has notified members and the NCUA of the accidental exposure of personal member data.
News Update, June 13, 2012: Bethpage CEO Explains Data Spill
In a press release and statement to its members Bethpage said Wednesday that data from up to 86,000 members had been accidentally placed on an insecure website while the credit union was moving the members from Visa-branded debit cards to MasterCard-branded debit cards.
Newsday reported that the information was inadvertently posted by an employee who has since resigned and that the information was available for about a month. President/CEO Kirk Kordeleski said an employee’s child discovered the leak through a Google search of the child’s name, the newspaper reported.
The credit union has not yet responded to Credit Union Times’ request for comment.
“The risk for fraud or identity theft is low, according to a data security firm engaged by Bethpage,” the Long Island credit union said in its statement. “Certain key data such as Social Security numbers, PINs and CVV security codes were not in these files. Bethpage’s core data system was not breached and was not involved.”
However, a statement on its website notified members that the exposed data included their names, mailing addresses and dates of birth, along with the numbers and expiration dates of their current Visa debit cards and the full account numbers of their primary savings accounts and the checking accounts linked to the exposed debit cards.
The credit union pointed out that the Visa debit cards compromised were already slated to be shut down as part of the migration to new cards, but Bethpage did not address the appearance that the exposed data, combined with the Bethpage's routing number, would appear to be enough to generate ACH withdrawals from members' accounts.
Bethpage also announced that it was offering members whose data has been exposed one year free access to credit monitoring through Experian, one of the three nationwide credit bureaus
.
