[BreachExchange] Wellington: Potential data breach may have exposed information

[Inga Goddijn]

https://www.mypalmbeachpost.com/news/local/wellington-potential-data-breach-may-have-exposed-information/3A03rMfDrPnjMd90OJXgKN/

A possible data breach may have exposed the information of Wellington’s
residents and customers, the village said Thursday.

Wellington found out about the breach recently when the village was
notified of potential unauthorized charges to credit cards used by
customers to pay utility bills, according to a news release.

Billing vendor Superion told Wellington Wednesday of “vulnerabilities in
their software” with the Click2Gov system used to accept utility bill
payments, the village said.

Once notified, Wellington shut down its Superion connection and started
trying to determine what information if any was exposed. That process
continues and technicians are beefing up the village’s hardware and
software to take care of any breach, the village said.

Superion was unable to confirm that any customer information was
compromised, but Wellington said it decided to notify customers as a
precaution.

“The village takes the security and protection of its customers’
confidential information seriously,” Wellington said.

Potentially at risk is credit card information for utility bill payments
made from July 2017 to February 2018, including customer names, credit card
numbers and expiration dates. Phone payments were not affected, Wellington
said.

The village is upgrading its software and security protocols and building a
new server. Until the system once more is secure, these methods can be used
to pay utility and building department bills:

   - To pay a utility bill, call Customer Service at 561-791-4010.
   - To pay a building department bill, call 561-753-2430.
   - To pay either, call the Interactive Voice Response line at
   561-753-2418.
   - Pay in person at Village Hall, 12300 Forest Hill Blvd.
   - Utility payments may use the drop box outside Village Hall.

*What to do*

• Review credit card statements and report unauthorized charges, no matter
how small, to the card issuer.

• Ask your credit card issuer or bank to deactivate your card and issue a
new card.

• Request a fraud alert on your credit file. This will tell creditors to
contact you before opening new accounts or changing existing accounts.

• Request credit reports be sent to you, free of charge, for your review.
Even if you do not find any suspicious activity on your credit reports, the
Federal Trade Commission recommends that you check your credit reports
periodically. Equifax: Equifax.com or 800-525-6285; Experian: Experian.com
or 888-397-3742; TransUnion: Transunion.com or 800-680-7289.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20180607/137531f2/attachment.html>