Tim Orem reports:
A data breach compromised information belonging to about 300 members of the Lenexa, Kan.-based Mainstreet Federal Credit Union, according to President/CEO John Beverlin.
Beverlin told CU Times hackers did not break into the credit union’s systems and that the fraudsters likely purchased members’ information somewhere online. Now the criminals are trying to capitalize on it, he said, and they’ve rung up more than $200,000 in fraudulent charges so far.
Read more on Credit Union Times. From one link in the story, it appears that the CU may be trying to tie the stolen consumer account information to a merchant breach – and the Home Depot breach in particular.
Update1: Kansas City Business Journal reports that the fraudulent charges occurred during a 20-hour window before it was discovered and that about 300 members were impacted.