CompuCredit took immediate action upon learning of the incident. Below is an update on the actions taken to date, and our preliminary findings.Actions Taken and Preliminary Results of Internal Investigation
A computer processing error created a single image file of 120 account statements for the month of April. Statement files are delivered to the cardholder through the website in Adobe PDF format. Because of a load error, the system failed to detect page breaks between the account statements, thus resulting in the system "believing" that all of the pages belonged to a single statement. As a result, the PDF image file contained 119 statements in addition to the cardholder’s statement.
All of the 120 accounts in question had already been closed prior to this incident. Thus, any attempt to make a transaction with this information should be declined. There has been no indication of any account fraud related to this incident. (Note: Monthly account statements do not include customers' Social Security numbers or PINs.)
Access to the subject statements was limited to a subset of cardholders within the affected group who were registered to use the website for online account access. A preliminary review of logs show that only three cardholders accessed statements via the website while the error was present (including the customer in Indiana who first alerted media). No one who accessed these statements could gain access to any other online information related to these accounts.
As a precaution, online access to statements remains suspended pending thorough testing of the remediation measures. Customers are still able to access the website for other functions such as making a payment or checking available credit.
We are contacting the affected customers, providing new account numbers (again, the accounts are closed, but we took this action as an additional precaution), and have offered to enroll these customers, free of charge, in the Equifax Credit Watch program (12-month subscription).
CompuCredit takes the privacy and security of our customers’ information very seriously and we regret any inconvenience.
