Metro's Response to Visa's Recent Compromise

Metro Federal Credit Union was recently notified that national retailing merchant The TJX Companies, Inc. has reported a security breach to their computerized credit card processing system, and this compromise may have included some Metro member data. Because ensuring member security is our top priority, we have proactively identified possibly affected accounts and begun notifying these members. If you think you may have been affected, please review the below Frequently Asked Questions prior to contacting Metro.

Q: Is it true that there was a recent incident involving a data compromise at a national merchant?
A: Yes, The TJX Companies, Inc., parent organization for TJ Maxx, Marshalls, HomeGoods and A.J. Wright stores, has confirmed that they experienced a card security breach. Please be assured that Metro Federal Credit Union is actively identifying and monitoring all potentially affected accounts to protect our members from possible fraud. Those affected will soon receive a letter from Metro notifying them of their involvement in the compromise. As an added precaution, new Visa Check Card / Credit Cards will be issued and mailed to these affected members, and should arrive within the next couple weeks. Until that time remember to choose ‘credit’ when making purchases with your current card to ensure your purchases are protected with Visa®’s Zero Liability® policy, which means you pay nothing for unauthorized purchases on your account.

Q: How did this happen?
A: It is important to note that Metro Federal Credit Union has not suffered a security breach and all of your other personal and financial information is safe and secure. Whenever a card number is used to make a purchase, the information is transmitted through the payment network. Though it is uncertain exactly how the breach occurred, a fraudster may have gained access to this information through one of the parties involved with the payment network used by, or including the merchant. Remember to review your monthly statement carefully and contact Metro immediately should you note any suspicious activity involving your account.

Q: Can you tell me if my card information was stolen in this incident or if it has been used fraudulently?
A: Although certain account data may have been exposed in this incident, it is uncertain whether this information will be involved in instances of fraud. Please be assured that Metro FCU is aware of all member accounts that may have been involved in this breach, and we are actively monitoring the activity these accounts to prevent possible fraud. As a precaution to ensure the security of these accounts, each will automatically be issued a new Visa® Check Card / Credit Card [depending on the affected means of payment] that should arrive at these members’ homes within a few business days.

As always, we strongly encourage you to carefully review your account activity via Metro’s Online Banking service or via your monthly statement as soon as possible. Should you see any suspicious activity, please be sure to contact us immediately.

Q: Was it my Visa® Check Card or my Visa® Credit Card that was involved in this incident?
A: Both check cards and credit cards were affected by this security breach. However, the only card(s) in question on possibly affected member accounts is the one used at point of sale with this merchant. Rest assured, Metro FCU is aware of which means of payment was involved and will be issuing the proper replacement.

Q: Will I receive a new Personal Identification Number (PIN) with my new Visa© Check Card?
A: Yes. Your personal identification number (PIN) will change for security purposes. A letter containing this new number should arrive within a few business days following your new Visa® Check Card. Until that time, simply hit ‘credit’ when making purchases with your new Check Card to ensure your purchases are protected with Visa®’s Zero Liability policy, which means you pay nothing for unauthorized purchases on your account.

Q: I recently noticed fraud on my account. Is this fraud related to the recent incident?
A: It is unclear whether this fraud is related to the incident in question. Regardless, it is imperative that you contact Metro immediately to report your findings.

Q: How many cards were involved in the incident?
A: We don’t have this information.

Q: Has the security breach been fixed?
A: Yes. Steps have been taken to make sure the exposed information is useless, and the affected party is working closely with Visa® and law enforcement to ensure no further information is exposed.

Q: What part of my information was stolen?
A: It is too early to say if any of your information is actually at risk. It’s important to note that although your information may have been exposed, it does not necessarily mean fraud will or has occurred on your account. Please be assured that Metro FCU is actively monitoring all potentially affected accounts to protect you from possible fraud. As an additional precaution, new Visa® Check Card / Credit Cards were issued and mailed to member accounts that may have been affected. New cards should arrive within the next few weeks. In the rare event fraud does occur, as a Visa® cardholder you are protected with Visa®’s Zero Liability policy, which means you pay nothing for unauthorized purchases on your account. In the mean time, should you notice any suspicious activity involving your account, please contact us immediately.

For an official statement from The TJX Companies, Inc. regarding this incident, visit http://www.tjx.com/tjx_message.html.

Q: What are the chances that I become a victim of identity theft as a result of this incident?
A: It is important to note that Metro FCU has not suffered a security breach and all of your other personal and financial information is safe and secure. Thus far it has been determined that it was not personal information, such as Social Security numbers or addresses, that was stolen so we believe that the risk of identity theft is greatly reduced. In fact, fraud rarely occurs on accounts compromised during a data breach. However, it’s always a good idea to check your credit report regularly for incorrect information. In fact, you’re entitled to one free copy of your credit report every year at www.annualcreditreport.com or by calling 877-322–8228.

Q: If I become a victim of identity theft, how will you help to restore my standing?
A: In the unlikely event you become a victim of identity theft, Visa® works with the consumer network group Call for Action to provide consumers with a toll-free telephone hotline to assist identity theft victims. By calling 866-ID-HOTLINE, victims can receive free and confidential assistance from trained counselors.

Q: What are you doing to protect my personal account information, especially in this case?
A: It is important to note that Metro Federal Credit Union has not suffered a security breach and all of your other personal and financial information is safe and secure. Metro offers members multiple layers of security protection against fraud including Visa®’s Zero Liability policy, the ultimate protection for cardholders. With Zero Liability, consumers are not responsible for any unauthorized purchases made on their Visa® cards.

Q: What can I do to ensure this doesn’t happen to me again?
A: While Metro FCU and many merchants employ the latest systems and technology to monitor and prevent credit and check card fraud, it is important to follow these practical steps in order to further protect yourself:

Regularly check your account statement and immediately report any transactions that you don’t recognize
Destroy all receipts before discarding them since some of them may contain your card number
Do not give out your card number over the phone or via the Internet unless you initiated the purchase
Check your credit report annually to ensure accuracy
Register your card with Verified by Visa® by visiting www.Visa.com/verified, When shopping online, make sure the merchant participates in the Verified by Visa® service. This provides additional protection against unauthorized use of your card online.

Q: What should I do if I experience fraud on my account?
A:Contact Metro immediately to report the fraud and learn the steps involved in correcting the action.

Q: Are there any other tips you can provide to reduce my chances of card fraud?
A: Yes. Visit Metro FCU’s Fraud Prevention web section for the latest tips and updates. Additionally, Visa® provides several tips specific to card security at www.Visa.com.

Q: What does Visa® ’s Zero Liability policy cover?
A: Visa®’s Zero Liability policy covers U.S.-issued cards only and does not apply to commercial credit cards, ATM transactions or PIN transactions not processed by Visa®. Cardholders must notify card issuers promptly of any unauthorized use.

As part of Metro’s ongoing efforts to maintain the highest level of information security, Credit Union policy states that all claims involving Metro Visa® Check Card / Credit Card fraud shall be rigorously investigated in order to identify and prosecute any and all offenders, and that Metro will proactively pursue all legal avenues available.