A few days prior to the Kmart breach being identifiable as the root case for card exposure and as part of the Alegeus Fraud Prevention Program in partnership with Mastercard and Visa, Alegeus began to proactively communicate to clients identifying specific cards exposed to possible compromise by a third party, such as a merchant and in this case Kmart. As part of the Mastercard and Visa compromised card process, the payment processor notifies Alegeus anytime a compromise has occurred and provides a list of impacted card accounts.
This does not mean that impacted cards have been subject to fraudulent activity. A compromised card alert is specific to the exposure of card data only. And, the information provided to Alegeus is limited around the details of the event if, and until, it is made publicly available.
What to expect from Alegeus
Should you, an Alegeus client, be included in an impact list, Alegeus will notify you and provide best practice security measures and employer communication strategies to follow. With an event like the Kmart breach, we can expect to see additional cards reported as the investigation continues. As new cards are reported to Alegeus by Mastercard and Visa, notifications will follow.
What to do when client cards are impacted
While Alegeus has limited insight into the details of such an event, we will recommend precautionary measures to protect participants.
Once the compromised cards have been replaced, you will have followed industry best practices to protect your clients and their participants. Should you have any questions about the compromised card alerting process, contact your Service Delivery Manager or WCA Customer Support at 888-852-9131.
Read more about the breach: Krebs on Security – Credit Card Breach at Kmart Stores. Again.