<p>lilmom, maybe they found her number for sale at one of those card shop rackets referred to earlier on this thread.</p>
<p>Packmom, we have always followed your H’s advice and only used our debit card at ATMs and use our credit cards exclusively for purchases. We are in the “pay in full at the end of each statement period” club, so there really is no downside.</p>
<p>^I’m going to suggest using the credit card for purchases to my DH, too. I don’t think he’ll object since we would also earn airline miles!</p>
<p>I received a letter yesterday from my CU that my card was one possibly compromised. They will be sending me a new card and PIN. I had this same thing happens couple/three years ago when TJMaxx/Marshall’s was hit.
Will have to place holds on my credit. I have near-perfect scores and I’m not about to lose them.</p>
<p>not good…[Target</a> says encrypted PIN numbers were stolen in breach - CBS News](<a href=“http://www.cbsnews.com/news/target-says-encrypted-pin-numbers-were-stolen-in-breach/]Target”>Target says encrypted PIN numbers were stolen in breach - CBS News)</p>
<p>
</p>
<p>Not just we consumers, but also merchants who are victimized by purchases made with bogus cards. Also card issuers who have to absorb the cost of re-issuing cards, and expend large amounts of manpower on heightened monitoring of their customers’ cards, and on communicating by phone and letter with their customers. In fact, it sounds like the only party who ISN’T having to absorb the expense of this breach is Target.</p>
<p>Lilmom, why not call now or tomorrow to cancel and get new cards? Most issuers are open on weekends (and nights).</p>
<p>Hardly ever have used debit or ATM card; rely upon our CC to charge everything that can be charged and pay off in full EVERY MONTH. LOVE IT! We get the benefits without the interest, late fees, and charges. Our card gives us 2% cash back on all purchases. We charge our gas on AmEx Business Costco CC and get 4% back!</p>
<p>Have been told by our CC company that we didn’t use our CC during the relevant time period so we should be fine. We used it about 10 days prior to the breach. CapitolOne says they will cover 100% of any fraud. </p>
<p>Am not sure that it isn’t the CC company that will have to reimburse the merchant if the card is fraudulently used–seems it shouldn’t be the merchant who loses, but I don’t know.</p>
<p>^^ You might be right about that, HImom. I wonder if the CC company will then present a bill to Target? I don’t feel the CC companies should be stuck with losses, any more than the merchants or consumers should.</p>
<p>My s used his debit card at Target during the breach time, so as soon as he got home for break, I had him go to the bank to get his card replaced. The bank talked him into the “wait and see” approach. The next day h went back with him and got him a new card. I was kind of annoyed with the bank. I don’t think wait & see is a good idea with a debit card.</p>
<p>I read where one bank suggested that you change your PIN but keep the old card. No thanks, I’m getting new card and will probably keep the PIN that I’m used to.</p>
<p>I assure you that Target is incurring great expense here. It is costing them millions of dollars. A data breach is a company’s worst nightmare. Is there some reason to think Target screwed up here? I might have missed something, but I thought this was reported as a very sophisticated hacking into their system- possibly an inside job??? I can’t believe Target didn’t have every possible security measure in place. I am a lawyer in the retail business, and I’m learning a lot about this topic. It’s not an easy area and it is hard to anticipate the “next generation” of hackers even when purchasing the latest and greatest security software/systems for your company.</p>
<p>MOWC, no system is 100% safe, although I have to wonder why it took them almost 3 weeks to realize something was going on. The security guys at my company are scratching their head about that.</p>
<p>As a retail lawyer, can you shed any light on why Target wasn’t more proactive about telling customers, who continued to use cards which Target knew were compromised, during the height of the Christmas shopping season no less? The world found out 4 days after Target knew about the beach, and then ONLY because of a report on an obscure security website, which Target was forced to confirm. I wonder when they were planning to tell us, and why the delay?</p>
<p>I am not behind the scenes at Target, so I can’t really answer your questions. It takes some time to figure out what needs to be done and who needs to be notified. Continuing to use the cards didn’t really hurt any consumers and the consumers aren’t out any money. I know it is very inconvenient- I did not get caught in this breach but I have been caught in others (the most recent one my bank would not tell me what retailer had the breach) and I HATE getting a new card. My card is linked to a lot of sites, auto-payments etc. There are laws governing when a company has to notify the consumers, and I’m sure Target complied.</p>
<p>Thanks, MOWC. It just strikes me that Target continues to handle this very badly from a PR standpoint (which I know is sometimes at odds with the legal considerations). These days I think the accepted wisdom is that the company should get out in front of the story, be the one to announce it rather than get caught having to confirm it from other sources, etc. I believe that drip-drip-drip is to be avoided if possible.</p>
<p>Last week, they were insisting that PINs were not captured by the hackers. I’m with you – replacing a card is inconvenient, but we did it anyway the day after the first announcement. In view of the latest revelations, I’m glad we did.</p>
<p>My bank has a notice on their website stating that they have received a list of card numbers that were possibly compromised and would be notifying the cardholders. Today I received a letter that they are issuing me a new card and that effective 1/5 my current debit card will be cancelled. I appreciate that they have been so proactive.</p>
<p>Went to target today with sisters and mom. I paid cash because I’m not convinced how well they fixed security. It seemed pretty thin of shoppers. My sister was thrilled to be buying Christmas things for 90% off! That was a good price but I just didn’t want to store anything! They had small bottles of Goo Gone for $1. They had rubber ducks for $1 apiece. They had cello gift bags 20 for $1. They also had the Cascade Platinum dishwasher packets 2 for $22 and $5 gift card back! </p>
<p>My sis used credit card and figures they MUST have fixed things and “lightening can’t strike twice!”</p>
<p>^^^ Actually the safest time I ever feel when I fly is right after a major plane crash, so I agree with your sister’s thinking.</p>
<p>Wonder when they really discovered how far reaching the security breach was. Somehow I think they hid this until after the Christmas shopping period.</p>
<p>[Target</a> says up to 70 million more customers were hit by December data breach - The Washington Post](<a href=“http://www.washingtonpost.com/business/economy/target-says-70-million-customers-were-hit-by-dec-data-breach-more-than-first-reported/2014/01/10/0ada1026-79fe-11e3-8963-b4b654bcc9b2_story.html]Target”>http://www.washingtonpost.com/business/economy/target-says-70-million-customers-were-hit-by-dec-data-breach-more-than-first-reported/2014/01/10/0ada1026-79fe-11e3-8963-b4b654bcc9b2_story.html)</p>
<p>“Affected customers will be sent an e-mail providing them with general security tips, said Target, adding that no personal information would be requested in the e-mail. The Minneapolis-based retailer is also offering one year of free credit monitoring and identity theft protection to all shoppers.”</p>
<p>Has anyone received this email? I used my cc at Target during this period but have not received any email as of yet.</p>
<p>No email. I used mine during that period. And many other times before and after. And again today. I don’t think they have my email, actually.</p>
<p>My bank sent me a new card yesterday, unbidden, because of the Target breach.</p>
<p>
</p>
<p>If “they” means the crackers (who are probably better at this stuff than corporate IT departments), then of course they are trying to hide the breach – their goal is to not be detected as long as possible while continuing to steal information.</p>
<p>Regarding this second discovery, the news articles do not mention where the names, addresses, etc. came from. Would they be from on-line purchases, or Target credit cards?</p>