If you have a Chase card replaced due to the Target leak, you are still at risk

[ChasIInd]

I have been a lurker on these boards for years, but something happened to me that everyone should know about.

Yesterday someone called Chase with my old credit card number that was replaced by Chase 3 months ago due to potential fraud because of the Target leak. They allowed this person to change the password for my online account even though they were calling with the number that was cancelled. They never followed through with 2 factor authorization (text or phone call), even though the account required that. This gave the fraudster access to all of my Chase accounts, as well as my bank account numbers that are used for payment. They also got Chase to send them a replacement card with the new valid number! Chase told me this happens because sometimes people call with the old numbers.

Bottom line - even your new card isn't safe, as well as all of your online information - Chase will allow people with the old numbers to gain access to your accounts.

 

[Niagara2]

How did you find out? I just had a card replaced as someone tried to use it a state away last month.
That is terrible. I have chase accounts and would hate to have anyone get access.

 

[ChasIInd]

I tried to log in to my online account, and the password had been changed. I changed it back and noticed the email on the account was changed. At that point I called Chase. They told me that someone had called with the old number.

They had access to all of my information until I called - Chase didn't catch it. I spent most of the day today changing account numbers, working with my bank to get all new accounts, and talking to the police.

Chase feels that all they have to do is replace my cards with new numbers. They told me that the compromised bank account information is my banks' problem - they will do nothing for me.

 

[Pooh2]

We just got an alert from Chase that a Michael's purchase compromised our card and they will monitor our account. Seems to be a problem that is only going to get worse.

 

[Swimalie]

Is this with a Chase/Target credit card? If so, how did they get access to your bank account number?

I have the Target Red (credit) card and I can't think of a way a person could get ahold of my bank account through it.

 

[sunshinehighway]

Is this with a Chase/Target credit card? If so, how did they get access to your bank account number?

I have the Target Red (credit) card and I can't think of a way a person could get ahold of my bank account through it.

I'm curious about the bank account info as well. I have chase credit cards and they are linked to my checking account for auto pay. The only info that shows up through Chase is the last 4 digits of the account.

 

[PoohBearnTigger2]

So sorry this happened to you. I just checked our chase account online and I can only see the last 4 digits of my bank (checking) account number. This is very alarming if they were able to get your full account info. I guess it's alarming any way you look at it. :/

 

[sayheyrenee]

Last week I went to pay a Bank of America (Royal Caribbean) credit card online. Was unable to do so and couldn't figure out why.

Here they cancelled my cards and reissued new ones (in the mail) due to a compromise. The account was transferring information into the new account - that is why I couldn't pay it.

In order for them to even speak with me, I had to identify my name, address, phone and last 4 of social. The only thing they would do for me is take my payment over the phone. No new numbers were given to me or anything.

Clearly they had a protocol that Chase did not.
Sorry this happened.

 

[OrangeCountyCommuter]

I have been a lurker on these boards for years, but something happened to me that everyone should know about.

Yesterday someone called Chase with my old credit card number that was replaced by Chase 3 months ago due to potential fraud because of the Target leak. They allowed this person to change the password for my online account even though they were calling with the number that was cancelled. They never followed through with 2 factor authorization (text or phone call), even though the account required that. This gave the fraudster access to all of my Chase accounts, as well as my bank account numbers that are used for payment. They also got Chase to send them a replacement card with the new valid number! Chase told me this happens because sometimes people call with the old numbers.

Bottom line - even your new card isn't safe, as well as all of your online information - Chase will allow people with the old numbers to gain access to your accounts.

Something does not add up here

Sounds like Chase had an internal breach and is not being honest with you The clue is the giving away your bank account

 

[Owlpost23]

I hear you all about Chase.A few monthes ago,we wondered where our check from the overage from our escrow was.I called and they said that they had the wrong address for us.This is the company that holds our mortgage.Wonderful service,Chase!

 

[manning]

Request to change the email address should have been enough to alert them. Someone got sloppy. I would send a letter of complaint addressed to CEO. It will get filtered down.

The only way to change an email address s/b by email from your original email address or if by phone only after they have asked you to answer the security questions. I did this once and a few minutes later they called me back on my original phone number shown on the account.

If you haven't done so it call one of the credit bureaus and place a 90 fraud alert. Whichever one you call they will alert the other two. It's free. An alert you have to renew every 90 days.

I know you are limited to $50.00 but getting everything straightened out afterwards is a royal pain in the butt.

 

[j's m]

I just checked my Chase credit card account on line. Your pay from account only shows the last 4 numbers of your checking account, BUT if you click on edit, it show the whole account number and the routing number. So if someone has access to your on line account, they do have your bank account info, too.

 

[Zydebearsmom]

What a lot of people don't realize is whenever you write a check to someone they have your bank account number as well as your routing number. Bank account numbers are nothing it is the debit and credit card numbers you have to worry about.

 

[CandleontheWater]

What I'm thinking is that her chase accounts are all connected, so if they were able to change one password, they changed all of them, and then were able to get access to any accounts that the OP has with Chase (CC, Bank, etc).

 

[Swimalie]

I just checked my Chase credit card account on line. Your pay from account only shows the last 4 numbers of your checking account, BUT if you click on edit, it show the whole account number and the routing number. So if someone has access to your on line account, they do have your bank account info, too.

I guess I see now. I don't pay any of my bills through the billed. I pay by having my bank send them the payment. That should cut down on my account number being out there more, I think, as well as protect my from a billed taking more than they should.

 

[Jeff_G]

Wow this is beyond belief, this should not have happened at any level. Someone calling in to change a password should be proving a LOT of information beyond just an old credit card number. If this is true the banker on the phone messed up. I would start by writing letters to any one and every one at that bank. Then I would be canceling all accounts.

 

[sunshinehighway]

What a lot of people don't realize is whenever you write a check to someone they have your bank account number as well as your routing number. Bank account numbers are nothing it is the debit and credit card numbers you have to worry about.

Good point.
If someone was allowed to changed info and access accounts with an old number, it sounds like a failure by the csr. My experience with Chase has been positive and they always ask questions to verify who I am when I call.

 

[amcnj]

I had a problem with a replacement card from Chase. They initiated the replacement of the old card due to the Target issue. Shortly after receiving the new card (maybe two weeks later?), Chase fraud alert called and said someone with the card in hand had used it twice at a store several thousand miles away from where I live. Needless to say they cancelled that card too and sent another new one. So I don't know if it was coincidence or if the reissue process allowed someone to get the new card number and have a card made with that new number. At least now it has been several more weeks and no new problems!