Jul 02, 2008 -- Citibank ATMs compromised, PINs stolen
There's been a widespread security breach at some 5,700 Citibank ATMs. Heed this special warning if you've used a Citibank ATM (including those found at 7-Eleven stores) at any point this year.
Criminals hacked into the bank's system and were remotely able to capture account numbers and PINs. They then made duplicate cards that were used to withdraw money from accounts for about 7 months.
The banking industry's longtime rule has been that the burden of proof was on you if your PIN was stolen. They believed their system was impenetrable and if something went wrong, well, you must have been at fault by not protecting your account or PIN. But the hacker community shares info about how to break into back-end systems on a variety of message boards.
The real problem is that our banks rely on 1960s ATM card technology. Over in Europe, they've long since switched to using smart chips in ATM cards. These smart chips defeat the ability of hackers to duplicate a card should they capture a number.
Washington D.C. has also been complicit in this backwards-looking policy. Federal regulators who are in cahoots with the banks have not followed through on requiring them to follow international banking security standards.
The takeaway for you is that you've got to thoroughly monitor your account and follow up on any discrepancies.
Meanwhile, the folks at Wired magazine originally broke the Citibank story. And Citibank, to its shame, is still being hush-hush about the number of people affected and the amount of money that's been stolen. Ukrainian immigrant Yuriy Rakushchynets and 2 others are the likely culprits of the crime.
Our banking industry operates at below-Third World standards when it comes to data safety. It's well past time for our government to mandate that the banks adhere to recognized world standards in the field. Clark also thinks banks should be required to provide full disclosure to the media and the American people when breaches like this one occur.