Bank scam spreads as institutions look for possible source of breach

by Leanne Tokars (ltokars@wsbt.com)

Tools

Security breach at 1st Source Bank

In May, hackers gained access to a 1st Source Bank server that holds debit card information for their cardholders and other banks' customers who used a 1st Source Bank ATM machine. Some companies are blaming that breach for unauthorized withdrawals from hundreds of accounts in dozens of local banks and credit unions across our area. (WSBT photo)

By WSBT News1

SOUTH BEND — An international bank scam is spreading, and there is some idea how that information may have gotten out.

Hundreds of people and dozens of banks and credit unions across our area are trying to recover from a major security breach.

The financial institutions involved include Teachers Credit Union, MFB and the Farm Bureau Credit Union in Goshen — just to name a few.

Now, some companies are pointing their finger at one bank for the source of the breach.

Beth Baker was at the St. Joseph County police station before we caught up with her outside the Notre Dame Federal Credit Union downtown.

“It's so maddening because it is a hassle,” exclaimed Baker. “It's so time consuming to be able to go to the bank, the police, and back to the bank."

On Tuesday night her husband found six mysterious withdrawals from their account. They totaled between $200 and $300. They all happened on Tuesday, and they all happened in Denmark.

“It's just this convoluted sequence of numbers and letters that didn't indicate any particular retail outlet,” said Baker.

She's not alone.

In St. Joseph County more than 40 people have filed reports since Friday. More than 20 people have filed reports at the South Bend police station. Plus, hundreds of cards from South Bend to Goshen are believed to be compromised.

So how did this happen?

“The pieces are starting to come together,” said Jim Seitz with 1st Source Bank.

In May, hackers got into 1st Source Bank's server that holds their debit card information. That included their debit card holders, as well as other people from other banks who used a 1st Source ATM machine.

“These are a very sophisticated group of hackers,” said Seitz. “I mean, this isn't some 17-year-old kid in the basement. They are very well organized, very well funded, and they have been attacking institutions and organizations through the country for some time now."

Seitz says they're now investigating whether the security breach played a role.

“There's no question that we're seeing transactions coming out of Ukraine, out of Russia, out of Czechoslovakia, and other financial institutions are seeing the same things. So as you piece it together, there's obviously some evidence to point you in that direction,” said Seitz.

But for Beth Baker her concern now is what will happen once this is long over.

“You know, Notre Dame [Federal Credit Union] has assured me I'm going to get the dollars back that were taken out of my account. But we're all going to pay for it in the long run. One way or another; we'll all end up paying,” said Baker.

Most banks say they can refund your money taken within 24 hours.

If you do notice money missing from your account, you are urged to first call your financial institution.

You should follow up in writing by certified letter, so you can prove when the institution received your letter.

Be sure to keep a copy of the letter for your records.

You have 60 days from the date your bank account statement is sent to report any money taken from your account without permission.

Sunday, Jun 22 at 5:15 PM Anonymous wrote ...

I just found out that my checking account was hit this week and I'm with National City Bank. They took me for $1240.00

Friday, Jun 20 at 11:55 AM Used to Work at 1st Source wrote ...

1st Source Bank is a fine company that was started right here in South Bend, IN. Their vested interest is THIS community. If you close your account about this situation, then you don't know very much about banking. The Branch Managers and other staff care about you, your finances and even your family. I understand if you are going through a frustrating situation, but you should know 1st Source isn't the culprit....others are!

Friday, Jun 20 at 7:02 AM M wrote ...

...did you use your card at Martins?

Thursday, Jun 19 at 8:46 PM Anon 2 wrote ...

I am really sick of hearing "1st Source", "1st Source"! I have NEVER used their ATMs, bank with Key Bank, and was hit from Russia several times over the weekend for over $500. Key Bank has been great, and my issue is resolved...but get a grip...there's got to be something else in common if NOT EVERYONE used a 1st Source ATM or Bank in the past 6-months!

Thursday, Jun 19 at 8:42 PM BTT wrote ...

Obviously this is a nightmare for 1st Source just as it is for everyone who's been hurt by this scam. Anyone who thinks this can't happen at any other financial institution is sadly mistaken. Although I have my account at another bank, I know 1st Source is doing everything in its power to correct this situation-if for no other reason than it's in their best interest to do so. Any idiot can be a back seat driver and frequently is.

Thursday, Jun 19 at 8:41 PM Drained wrote ...

EP: Received my money back today. Hope everything works out for you too!

Thursday, Jun 19 at 8:09 PM Todd wrote ...

National City called me yesterday before money could be taken and canceled my card number. That is real service. I highly recommend them.

Thursday, Jun 19 at 4:44 PM R. wrote ...

Law Suit who are you going to sew The people in Spain or Russia? 1st source did not steal your money, and it could have been any bank they decided to attack!

Thursday, Jun 19 at 2:56 PM 3leggeddog wrote ...

I bank at National City, and they were able to have my money refunded within 24 hours. Martin's isn't saying anything yet, but I'm almost certain that either they or their credit card processors had a leak, just like 1st source did. I love National City.

Thursday, Jun 19 at 2:47 PM EP wrote ...

Hi Drained...mine was very near $1000 as well. I too noticed mine over the weekend but couldnt do anything more than cancel my debit card. I am switching to a different bank...one that has a 1-800-number for such emergencies. I checked on that when looking at possible banks to switch to. Sorry you are having to wait for your money...hope it all works out.

Thursday, Jun 19 at 2:15 PM Not Stupid wrote ...

1st Source was the ONLY safe bank it appears. The crooks knew 1st Source would be aware and change security following the breach. The other banks thought they were safe. Hell these guys probably tossed the 1st Source data aside.

Thursday, Jun 19 at 1:14 PM Reality Check wrote ...

Hey people---if you follow the news reports, you'll now exactly what to do. In order for the "criminals" to get this information, they had to have help here locally. File a police report, file your fraud complaint (you'll get your money back) and be done with it. No matter where you go, you'll be faced with the same issue down the road at some other bank. It's the way things are now. You can crawl into a cave I suppose to get away from it all.

Thursday, Jun 19 at 12:19 PM Jayme wrote ...

My husband and I bank with TCU and USAA. So far, my account with TCU has been okay. USAA's fraud dept. called me two days ago with info that their were 4 withdrawals from the Ukraine within the previous 5 MINUTES before she called me. They filed a report, cancelled our card and immediately refunded the money. THEY initiated the call, etc. Very impressive!

Thursday, Jun 19 at 11:12 AM Drained wrote ...

To EP: I was probably one of the first persons to notice it. I saw it on Saturday the 14th, but the bank was closed by the time I saw it. Yes, I filed a police report that same day and filled out an affidavit with the bank first thing Monday morning. I got hit with approximately $1000. Not sure how much yours was, but maybe it's because of the amount. Not sure. Anyway, thanks for the info.

Thursday, Jun 19 at 10:15 AM Your bank isn't my bank anymore wrote ...

I have not had a very good run of luck lately but I did stay at a Holiday Inn Express last week and STOPPED BANKING AT FIRST SOURCE 15 years ago when they had another breach in their system. That one was in the form of a branch manager who shared my company's financial information with another business owner. They didn't handle that situation too well either. Good luck to those who lost by this and GODD RIDANCE to the loser that caused it.By the way, I don't even trust their time and temprature!

Thursday, Jun 19 at 9:20 AM JLC wrote ...

I got hit for $400 and I don't bank at 1st Source - I bank with 5/3 in Michigan - and I have never used any ATMS for banks listed in this article. In this day and age - I don't think there is anyway to completely protect yourself against this.

Thursday, Jun 19 at 8:27 AM M wrote ...

I do not use 1st Source ATM's...but entered my PIN at the cash register at Martin's in Granger. My PIN was lifted from there. Martin's has a responsibility to alert their consumers as well. Shameful behavior from both companies.

Thursday, Jun 19 at 7:28 AM Elle wrote ...

Wells Fargo doesn't even recognize there is anything wrong. Treating this like it is a regular incident that needs to go through the regular fraud claims department. I WANT MY MONEY BACK...THANK YOU!

Thursday, Jun 19 at 7:27 AM EP wrote ...

To "me" at 7:00 am.....the information about 1st source's breach was not made known to people other than 1st source members until just recently...the breach happened over a month ago. They notified their customers, but not the general banking public. Had they made the information known to all and advised that anyone who used their ATM machines to take action this could have been avoided...or at least it would have affected far less people.

Thursday, Jun 19 at 6:00 AM me wrote ...

I can't believe that there are so many people out there who use atms from an institution other than their own...so many fees! But when 1st srce released that they had a security breach, didn't anyone from another institution think "oh crap, I used their atms too!" I'm sorry this happened to so many people, but it's so easy to steal ppls info anymore. Minimize and protect people!

Thursday, Jun 19 at 5:17 AM ev wrote ...

now the numbers in the sequence say "denmark" to the bank equipment. that's probably because the crooks got blocked at russia and whatever other God forsaken country they had been using. i bet it didn't come from denmark, but still russia and nigeria-that's where alot of other internet scams come from. they figured out how to change the numbers.

Thursday, Jun 19 at 2:07 AM Goshen wrote ...

This is why I do not use a debit card anymore. I have been the victim of internet theft from paying for something online with a debit card my card was a visa debit card and it took a week to recover my money. Guess nothing is safe anymore. It is pretty bad when you have to worry if your money is safe in the bank.

Thursday, Jun 19 at 12:21 AM EP wrote ...

To Drained...I bank at MFB and got hit with this over the weekend. Within 3 hours of me filing the fraud report my money had been refunded by MFB. Did you file the fraud report at the bank? Also you need to file a police report and call MFB and provide them with the case number from the police report.

Wednesday, Jun 18 at 11:14 PM j.dawn wrote ...

the u.s. needs to cut all internet biz with any country that this junk comes out of till that country can make it safe to do business with it

Wednesday, Jun 18 at 10:32 PM Anonymous wrote ...

I agree...they are not doing enough to assure customers that this wont still spread like wildfire. 1st Source may have refunded some, but other people are hurting because they do NOT do enough to protect their own systems. If there are thousands of other potential victims, they were certainly hush hush until it was too late. They didnt do enough to prevent this...by far! Shame on them!!

Wednesday, Jun 18 at 10:28 PM Concerned wrote ...

You've got to be kidding me. First Source OBVIOUSLY did not do enough to prevent this. If they knew their entire ATM system was breached, they did NOT do enough to let the entire public know that customers other than their own were at risk!! I suppose if the public hadnt contacted WSBT, we would have never even known about that breach! Notice how that Sietz guy isnt accepting responsibility for their costly errors? THEY JUST FINGER POINT. Its 1st Sources fault. What about corporate responsiblity

Wednesday, Jun 18 at 9:18 PM Drained wrote ...

1st Source never warned anyone about using their ATM machines, did they? If there was a breach, other people, not just 1st Source customers, should have been told not to use their ATM machines. What crap!

Wednesday, Jun 18 at 8:44 PM Richard C wrote ...

This is not the first time this kind of thing has happened. The entire country of Estonia - government, schools, financial institutions - has already had a "Pearl Harbor" on the Internet. The US is responding, in part, by creating the Air Force Cyber Command (to be operational in Phase 1 by October 1), but it will probably take a long time and a lot of effort to better secure us. Don't be surprised if this happens again - just try to be prepared for it.

Wednesday, Jun 18 at 8:41 PM Still love 1st Source wrote ...

1st Source was very up front about the situation after they got their arms around the problem when working with authorities. I have always had great service over the years and they have good to work with. It's too bad this happened to them...but it's happening to all banks. It's a sign of the times. Anyone who changes banks because of this will go to another bank that will deal with the same thing in the future.

Wednesday, Jun 18 at 8:39 PM me wrote ...

I got rid of my atm card yrs ago, but I am afraid now people are going to start withdrawing out of accts. by phone. What are we suppose to do keep our life savings in our home? computers are our enemies as much as our friends. I think stiffer punnishments are in order for ID theft and bank fraud. I am so sorry for all you going through this crap.

Wednesday, Jun 18 at 8:16 PM Ted wrote ...

These banks, especially, 1st Source, are doing such a good job with their communications - kidding. Whoever does their marketing/pr should get smart or get out.

Wednesday, Jun 18 at 8:06 PM Douglas K wrote ...

Sounds like these other banks are to blame for not refunding the money in a timely manner for their clients. I bank with 1st Source, and they refunded my $$ within 24 hours. Seems that no bank is immune to this kind of breach. 1st Source is still the best bank in town!

Wednesday, Jun 18 at 7:59 PM Melissa wrote ...

I see possibly a big law suit down the road, I am sorry to hear about this to all have been hit.

Wednesday, Jun 18 at 7:30 PM MS wrote ...

what is the holdup.... I would like my $1,000 dollars put back in my account TCU...PLEASE

Wednesday, Jun 18 at 6:41 PM Drained wrote ...

I bank at MFB. Anyone receive a refund from them yet? Not me. This is killing me! If 1st source is responsible, they should be the ones that pay back all the other banks!

Wednesday, Jun 18 at 6:39 PM ** wrote ...

that is why they are called WORST SOURCE BANK......

Add a comment

Name:

Comment: 500 Characters Left

Comments are moderated and will not appear on this story until after they have been reviewed and deemed appropriate for posting.

WSBT and its affiliated companies are not responsible for the content of comments posted or for anything arising out of use of the above comments or other interaction among the users. We reserve the right to screen, refuse to post, remove or edit user-generated content at any time and for any or no reason in our absolute and sole discretion without prior notice, although we have no duty to do so or to monitor any Public Forum.

WSBT Weather

icon
Current Temp 27
°
More Weather
More On Demand

Stock Quotes

YouNews

This content requires the latest Adobe Flash Player and a browser with JavaScript enabled. Click here for a free download of the latest Adobe Flash Player.
This content requires the latest Adobe Flash Player and a browser with JavaScript enabled. Click here for a free download of the latest Adobe Flash Player.

Tonight On WSBTFull Schedule

7.00
Wheel of Fortune
7.30
Jeopardy!
8.00
NCIS
9.00
The Mentalist
10.00
Without A Trace
11.00
WSBT News
11.35
Late Show with David Letterman

Question of The Day

When was the last time you bought a car?

E-mail your comments. We'll pick some to read during WSBT News at 5.