Compromised Accounts

Disclaimer: The following information is not intended to be and shall not be construed as legal advice, nor is it a comprehensive list of issues that could impact business.

A compromise occurs when one or a combination of the following elements have been breached:

Track 1: There are 2 tracks within a magnetic strip on the back of a credit or debit card. Track 1 contains the account number, the cardholder name, expiration date, offset or PIN parameter and discretionary data such as CVV or CVC.

Track 2: Track 2 contains the account number, expiration date, offset or PIN parameter and discretionary data such as CVV or CVC.

Track 1 and 2: Both tracks have been breached.

CVV/CVC: A unique three-digit “check number” encoded in the magnetic strip of all valid cards.

CVV2/CVC2: A unique three-digit “check number” printed on the signature strip of all valid cards.

Account Number: Unique 16 digit number that identifies the account. It is needed in all transactions.

Expiration Date: Date the card will expire. Needed in all transactions.

Name: Cardholder name is located in Track 1 only.

PIN: Needed for ATM and debit card transactions. May not be included in either track.

Common Types Of Breaches:

Intentional Theft: This is when there is external hacking, equipment or software theft, or misuses of data has occurred.

Accidental Loss: This happens when there is a clerical or data processing error, misdirected communications, lost mail, tape, disk, or laptop has occurred.

Incidental Theft: This is when sensitive data was stored on a stolen computer or stolen vehicle.