JACKSONVILLE, Fla. — The latest disclosure of data from a credit card processing firm was discovered because an irate consumer complained to one of her venders about how much junk mail she was receiving.

According to Michelle Kersch, a vice president with Fidelity National Information Services, FIS became aware of the potential breach in its security after being contacted by one of its retail clients which used it Certegy Check Services check authorization service. Kersch said that the retailer had been contacted by one of its customers who was irate over how much junk mail they received after every time they shopped at that store.

Since the retailer knew it had not shared any of the customers' information, the information must have come from Certegy. After confirming that it did had not been hacked from outside, FIS launched an internal investigation which eventually pinned the blame on a nine-year database administrator who has since been fired.

Kersch said the administrator, named William Sullivan, was one of five administrators who had that level of access to the company's data and that FIS had acted to strengthen its internal controls by removing laptops from database administration, disabling the ability to download data to third party devices such as flash drives and instituting spot checks on computers with high access to data.

Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.

Your access to unlimited CUTimes.com content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking credit union news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Shared Accounts podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical coverage of the commercial real estate and financial advisory markets on our other ALM sites, GlobeSt.com and ThinkAdvisor.com
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.