FBI investigates coordinated ATM scam

Article

FBI investigates coordinated ATM scam

Marcia Savage, Features Editor, Information Security magazine

The FBI is investigating a massive, highly coordinated ATM scam involving cloned payment cards that used data stolen from Atlanta-based payment processor RBS WorldPay.

    Requires Free Membership to View

    SearchFinancialSecurity.com members gain immediate and unlimited access to in-depth technical advice, strategies, and expert guides for securing data in high-risk financial environments. Join me on SearchFinancialSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchFinancialSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchFinancialSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

SearchFinancialSecurity.com:
To get security news and tips delivered to your inbox, click here to sign up for our free newsletter.

The attack, which occurred in November in several cities across the country including Atlanta, Chicago and Los Angeles, was well-coordinated, said Special Agent Steve Lazarus of the FBI's Atlanta field office.

"The people who did it are very computer savvy," he said.

He would not say how much money was stolen, but according to published reports, the criminal ring made off with $9 million. The thieves used stolen and cloned payroll debit cards and reloadable gift cards, Lazarus said. Payroll debit cards can be used by employers to pay employees.

Data security breach news:
First lawsuit filed in Heartland data security breach: A class action lawsuit was filed against Heartland claiming that the payment processor issued belated and inaccurate statements when it announced a security breach of its systems.

Payments processor discloses massive data breach Company says an intrusion of its processing system may be part of a broader fraud operation.
Data breach study ties fraud losses to Hannaford, TJX breaches
: Experts say breach costs are far reaching and could lead banks and merchants to find alternative payment methods.

Lazarus said the fraud ring involved a large number of people but declined to say how many.

The scam started when hackers broke into RBS WorldPay's computer system and worked with "cashers" who took actual cards to ATMs and withdrew money in timed, coordinated attacks, according to the FBI. The attacks, according to published reports, occurred in a short time period on Nov. 8.

RBS WorldPay, the U.S. payment processing arm of the Royal Bank of Scotland, reported on Dec. 23 that personal information of about 1.5 million pre-paid cardholders and other individuals was compromised when its computer system was hacked. The company said that actual fraud was committed on approximately 100 cards.

Another payment processor, Heartland Payment Systems Inc., disclosed in January that criminals broke into its processing system last year.