This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1334

SUMMARY

DNS hijacking puts 5,000,000 check processing accounts at risk
Records	5,000,000
Record Types	ACC
Breach Type	Hack
Data Family	Electronic
Source	Outside
Organization	CheckFree Corporation (FiServ)
Other Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	d2d

Date	Event
2008-12-02	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: (type the code from the image)
2008-12-04	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: (type the code from the image)
2008-12-08	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: (type the code from the image)

records	date	organizations
5,000,000	2003-03-06	Data Processors International
4,000,000	2006-06-13	KDDI
6,300,000	2007-09-14	TD Ameritrade
4,200,000	2008-03-17	Hannaford

Address: United States
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$300,000,000.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Checkfree breach notification
Filename	Source	Researcher	Incident IDs
fiserv.pdf	New Hampshire Consumer Protection & Antitrust Bureau	d2d	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-01-01	02 Jan 21:26
Excerpt
V;VVWW_; H lwlvvziviwlvlilzlZiiwiizizlzizlzli Fiserv, Ina, ·d{—4{].1 EEBSE }Oi”i&$ gF'it3E§€’;‘ ROB? —zV; I VzVzW;—¤ ¤ Vz—;V;W: »—» Norcross, GA 30094 December 3.E, 25008 QCBNFEEXNTEAL léeily Ayoot...

add details to this primary source Description
160,000 nation-wide, does not specify Colorado residents
Filename	Source	Researcher	Incident IDs
20081212-Fiserv.pdf	Colorado Attorney General	jericho	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-01-24	31 Jan 13:21
Excerpt
Ei?r*E‘3.··”2HiEi“F’ 1‘3IBT' 3@3Sl":iE‘EZl].‘·H·4 [:·,r;.\|GE Efjl \| r Fi$('Zi`\•", ini:. 4411 East Jones Bridge Road · Norcross, GA 30092 December :.i2, 2008 John Suthers Attorney General State of...

add details to this primary source Description
Checkfree breach notification letter
Filename	Source	Researcher	Incident IDs
ITU-164547.pdf	Maryland Attorney General	kirniki	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-01-31	01 Feb 22:44
Excerpt
I nit, Fiserv, Inc. 4411 East Jones Bridge Road _ ··· Norcross, GA 30092 December 12, 2008 I . CONFIDENTIAL I I I I Douglas F. Gansler I Attorney General . I State of Maryland 200 St. Paul Place Balt...

add details to this primary source Description
Personal and financial information may have compromised due to malicious software
Filename	Source	Researcher	Incident IDs
20081212-Fiserv.pdf	Maine Attorney General	d2d	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-01-12	08 Feb 22:39
Excerpt
Fiserv, inc. 4411 East Jones Bridge Road · Norcross, GA 30092 December 12, 2008 CONFIDENTIAL JONSUMER PROTECTION DIVISION o. Steven Rowe RECEIVER Attorney General State of Maine 1 State House Stat...

add details to this primary source Description
DNS hijacking puts 5,000,000 check processing accounts at risk
Filename	Source	Researcher	Incident IDs
NE-20081212_Fiserv.pdf	Nebraska Attorney General	Lyger	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-02-22	22 Feb 20:13
Excerpt
- Fiserv, Inc. F"-'"li 4411 Eastlones Bridge Road A K Norcross, GA 30092 ` December 12, 2008 Jon Bruning Attorney General, State of Nebraska State Capitol P.0.Box 98920 Lincoln, NE l 68509-8920 p . P...

add details to this primary source Description
Potentially affected customers that accessed the web to pay through OnLine Access were redirected from the authentic Bill Pay service tn another site that might have installed malicious software on their computer.
Filename	Source	Researcher	Incident IDs
VA_12162008_synovus.pdf	Virginia Attorney General	jkouns	1334
Records	File Date	Uploaded	Updated
922	2008-12-16	2009-02-03	11 Apr 17:35
Excerpt
lib.,-it €'·»-iii ·s 2 l)ecembcr l6. 2008 Bob \‘lcl)onnell i Si` -—`ittorncy General 900 East Mlaiti Street _ Ricltmottd. VA 232 l() · t»\ttorttey (ienertil NTlcl)oitnell; We it-rite to inlorm you...

add details to this primary source Description
DNS hijacking puts 5,000,000 check processing accounts at risk
Filename	Source	Researcher	Incident IDs
VA_12122008_checkfree.pdf	Virginia Attorney General	jkouns	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-02-03	07 May 12:45
Excerpt
nr;-¤¤r Fiserv, ln; M11 East tones Bridge Road Norcross, Grit 30092 D(·!C€Il`liJ€f 12, 2008 CONFFDENTIAL Bob McDonnell _ Attorney General ‘ State of Virgina 900 E. Main St. .. ` Richmond, VA 23219 Pl...

add details to this primary source Description
Maine Data Breach Notification : DNS Hijack may have exposed customers to malicious software that gathered personal information.
Filename	Source	Researcher	Incident IDs
ME_BFI_12192008_androscoggin_bank.pdf	Maine Attorney General	kirniki	1334
Records	File Date	Uploaded	Updated
24	2008-12-18	2009-01-19	05 Aug 11:19
Excerpt
.- Y ` ‘ —»— ` lc . . i ""———————, l£tl"i€llO=SCOtQ@li’Ti.;i.a;iii

add details to this primary source Description
Massachusetts Data Breach Notification : Fiserv - DNS Hijack may have infected consumers with Malware.
Filename	Source	Researcher	Incident IDs
20081212_fiserv.pdf	Massachusetts Attorney General	d2d	1334
Records	File Date	Uploaded	Updated
Not yet entered	2008-12-12	2009-08-08	03 Nov 23:14
Excerpt
Fiserv, Inc. 4411 East Jones Bridge Road · Norcross, GA 30092 December 12, 2008 CONFI ENTIAL Martha Coakley . Attorney General . State of Massachusetts 1 Ashburton Place Boston, MA 02108-1698 Please...