<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: BofA Discloses &#8220;Undisclosed&#8221; Breach</title>
	<atom:link href="http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/feed" rel="self" type="application/rss+xml" />
	<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach</link>
	<description></description>
	<lastBuildDate>Thu, 22 Jul 2010 16:11:14 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: riscphree</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5931</link>
		<dc:creator>riscphree</dc:creator>
		<pubDate>Mon, 07 Jun 2010 04:33:40 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5931</guid>
		<description>Got this letter May 13. I have multiple accounts with BoA, but they stated only one was compromised and re-issued a new card. They also said that my current card would be vaild till May 29th. 

Between May 13th and June 1st, I had $850+ of fraudulent charges on multiple accounts with BoA. 

Pain in the ass, but eventually I got it taken care of. Will this happen again? I have no doubt about it. Banks need to be a bit more proactive to this stuff. 

I will however, keep my business at BoA.</description>
		<content:encoded><![CDATA[<p>Got this letter May 13. I have multiple accounts with BoA, but they stated only one was compromised and re-issued a new card. They also said that my current card would be vaild till May 29th. </p>
<p>Between May 13th and June 1st, I had $850+ of fraudulent charges on multiple accounts with BoA. </p>
<p>Pain in the ass, but eventually I got it taken care of. Will this happen again? I have no doubt about it. Banks need to be a bit more proactive to this stuff. </p>
<p>I will however, keep my business at BoA.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sandra</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5930</link>
		<dc:creator>Sandra</dc:creator>
		<pubDate>Fri, 04 Jun 2010 20:54:34 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5930</guid>
		<description>I received a letter from B of A today, June 4,2010 giving me the same information as reported in the above messages.  I am very concerned about the 3rd party issue as I had two other cards compromised in April, a Chase Card, and State Farm Bank card. It is pretty obvious that we are doing business with a thief and yet we have no idea who it is.    The criminals  racked up charges on the first two which took place on the East Coast..I live on the West Coast...lookes  like a ring of thieves.</description>
		<content:encoded><![CDATA[<p>I received a letter from B of A today, June 4,2010 giving me the same information as reported in the above messages.  I am very concerned about the 3rd party issue as I had two other cards compromised in April, a Chase Card, and State Farm Bank card. It is pretty obvious that we are doing business with a thief and yet we have no idea who it is.    The criminals  racked up charges on the first two which took place on the East Coast..I live on the West Coast&#8230;lookes  like a ring of thieves.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jim Clark</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5929</link>
		<dc:creator>Jim Clark</dc:creator>
		<pubDate>Wed, 02 Jun 2010 21:43:40 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5929</guid>
		<description>Got &quot;the letter&quot; today about my cc account-- &#039;may have been compromised at an undisclosed third party location&quot;. It was or it wasn&#039;t and they have to know where by the merchant codes.Baloney! First, they could discover plain English. They sound like &quot;government speak&quot;. Why can&#039;t I know where not to shop? Because they don&#039;t want to hurt their merchant relationship. Screw the customer! And this is my second of these inconveniences, and I have to look up the info and make the calls and the credit bureau gets this crap from the bank and puts it on my report. And if I am busy or on vacation and my automatic payment is bounced, guess whose credit report that is on. And just try fixing a credit report. Close to impossible. Now I see why BofA was on a recent list of the worst places to do business. Richly deserved. Fed up.</description>
		<content:encoded><![CDATA[<p>Got &#8220;the letter&#8221; today about my cc account&#8211; &#8216;may have been compromised at an undisclosed third party location&#8221;. It was or it wasn&#8217;t and they have to know where by the merchant codes.Baloney! First, they could discover plain English. They sound like &#8220;government speak&#8221;. Why can&#8217;t I know where not to shop? Because they don&#8217;t want to hurt their merchant relationship. Screw the customer! And this is my second of these inconveniences, and I have to look up the info and make the calls and the credit bureau gets this crap from the bank and puts it on my report. And if I am busy or on vacation and my automatic payment is bounced, guess whose credit report that is on. And just try fixing a credit report. Close to impossible. Now I see why BofA was on a recent list of the worst places to do business. Richly deserved. Fed up.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe Jones</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5910</link>
		<dc:creator>Joe Jones</dc:creator>
		<pubDate>Wed, 19 May 2010 02:43:11 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5910</guid>
		<description>Got this exact same letter in the mail today.  The website address included in the letter isn&#039;t even valid.  Seems as though BofA isn&#039;t offering a dang thing.  Got a similar letter from Wells Fargo a couple of years ago and they paid for a year of credit monitoring service (can&#039;t remember which service, but and outside company).   At least, I don&#039;t have a bunch of recurring charges that I use with this card - what a hassle.  I&#039;m going to check into the above mentioned  &quot;shopsafe program&quot;.  I assume that has some fee attached to it.</description>
		<content:encoded><![CDATA[<p>Got this exact same letter in the mail today.  The website address included in the letter isn&#8217;t even valid.  Seems as though BofA isn&#8217;t offering a dang thing.  Got a similar letter from Wells Fargo a couple of years ago and they paid for a year of credit monitoring service (can&#8217;t remember which service, but and outside company).   At least, I don&#8217;t have a bunch of recurring charges that I use with this card &#8211; what a hassle.  I&#8217;m going to check into the above mentioned  &#8220;shopsafe program&#8221;.  I assume that has some fee attached to it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5899</link>
		<dc:creator>David</dc:creator>
		<pubDate>Thu, 06 May 2010 23:38:57 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5899</guid>
		<description>Probably a ploy to issue new cards with new terms &amp; fine print.</description>
		<content:encoded><![CDATA[<p>Probably a ploy to issue new cards with new terms &amp; fine print.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: karen byrd</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5898</link>
		<dc:creator>karen byrd</dc:creator>
		<pubDate>Mon, 03 May 2010 19:08:56 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5898</guid>
		<description>i had this happen to me. i should have known enough to use their shopsafe program when shopping on the internet.  this assigns a different number that you can use to make a purchase and it is a different number each time you use this service. this way nobody knows your real account number and
you would not have this problem. i will remember to do this from now on.</description>
		<content:encoded><![CDATA[<p>i had this happen to me. i should have known enough to use their shopsafe program when shopping on the internet.  this assigns a different number that you can use to make a purchase and it is a different number each time you use this service. this way nobody knows your real account number and<br />
you would not have this problem. i will remember to do this from now on.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mxh</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5865</link>
		<dc:creator>mxh</dc:creator>
		<pubDate>Fri, 02 Apr 2010 23:07:54 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5865</guid>
		<description>I was thinking of getting rid of the credit card, getting a cryptic letter like this just sealed the deal.  If they&#039;d rather save their business relations than protect their customers, I don&#039;t want to be associated with them.</description>
		<content:encoded><![CDATA[<p>I was thinking of getting rid of the credit card, getting a cryptic letter like this just sealed the deal.  If they&#8217;d rather save their business relations than protect their customers, I don&#8217;t want to be associated with them.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: K W</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5842</link>
		<dc:creator>K W</dc:creator>
		<pubDate>Mon, 15 Mar 2010 20:41:26 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5842</guid>
		<description>I received the same letter from Bank of America today, March 15, 2010. When I called to say &quot;Don&#039;t reissue a new card, I don&#039;t want one,&quot; they would not talk to me without me giving them my credit card number and/or social security number.  AND they were rude and transfered me twice without saying why.
How the heck are we even supposed to know the letter is real? And then they want us to call and give the person at the other end of the line all our account info???
And, same as the others, asked which merchant was compromised and they would not answer me. Why are they protecting them?</description>
		<content:encoded><![CDATA[<p>I received the same letter from Bank of America today, March 15, 2010. When I called to say &#8220;Don&#8217;t reissue a new card, I don&#8217;t want one,&#8221; they would not talk to me without me giving them my credit card number and/or social security number.  AND they were rude and transfered me twice without saying why.<br />
How the heck are we even supposed to know the letter is real? And then they want us to call and give the person at the other end of the line all our account info???<br />
And, same as the others, asked which merchant was compromised and they would not answer me. Why are they protecting them?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bob Pendleton</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5784</link>
		<dc:creator>Bob Pendleton</dc:creator>
		<pubDate>Fri, 12 Feb 2010 00:06:41 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5784</guid>
		<description>I have another exact copy dated February 2, 2010. I actually found out about the breach before the letter reached me. I happened to log into the BofA site to pay my credit card bill shortly after the 2nd. The site did not notify me of the problem. It showed the wrong account number and demanded that I put in a bank account number before I could pay and then it started sending me to the security page no matter what link I clicked on. There was nothing on the site to tell me what had happened. But, they had instructed the site to block access to my account. They could have let me know through the site. Why didn&#039;t they?

When I called to ask about the site I was told that my account was reported lost or stolen in early January. One bank employee let it slip that over 200,000 people were affected by the same breach. And then told me they did not know where the breach occurred. After being bounced through 3 people I was told that the breach occured on February 2nd. They refused to tell me where the breach occurred. They seem to have lied about when the breach occurred. They did not cancel my stolen card. They did not call. They did not send me an email.  Their staff told me BofA could not do either! And yet they can do both when a payment is late. All they did was send out new cards by snail mail.

The replacement cards they sent were already activated. Anyone who happened to get their hands on the new cards could have used them. I was not informed that the cards were coming so I would not even know that they were missing.

As far as I can tell a criminal act took place and Bank of America is actively colluding to cover up the crime. 

I collected my notes on what happened and sent them to everyone I know in hopes of warning them of the the danger. The message that Bank of America is not taking any reasonable steps to protect customers must be told. When a bank as large as BofA becomes more interested in covering up a crime than helping the victims, then they need to be put out of business.</description>
		<content:encoded><![CDATA[<p>I have another exact copy dated February 2, 2010. I actually found out about the breach before the letter reached me. I happened to log into the BofA site to pay my credit card bill shortly after the 2nd. The site did not notify me of the problem. It showed the wrong account number and demanded that I put in a bank account number before I could pay and then it started sending me to the security page no matter what link I clicked on. There was nothing on the site to tell me what had happened. But, they had instructed the site to block access to my account. They could have let me know through the site. Why didn&#8217;t they?</p>
<p>When I called to ask about the site I was told that my account was reported lost or stolen in early January. One bank employee let it slip that over 200,000 people were affected by the same breach. And then told me they did not know where the breach occurred. After being bounced through 3 people I was told that the breach occured on February 2nd. They refused to tell me where the breach occurred. They seem to have lied about when the breach occurred. They did not cancel my stolen card. They did not call. They did not send me an email.  Their staff told me BofA could not do either! And yet they can do both when a payment is late. All they did was send out new cards by snail mail.</p>
<p>The replacement cards they sent were already activated. Anyone who happened to get their hands on the new cards could have used them. I was not informed that the cards were coming so I would not even know that they were missing.</p>
<p>As far as I can tell a criminal act took place and Bank of America is actively colluding to cover up the crime. </p>
<p>I collected my notes on what happened and sent them to everyone I know in hopes of warning them of the the danger. The message that Bank of America is not taking any reasonable steps to protect customers must be told. When a bank as large as BofA becomes more interested in covering up a crime than helping the victims, then they need to be put out of business.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Norma Jane Browning</title>
		<link>http://philosecurity.org/2010/01/24/bofa-discloses-undisclosed-breach/comment-page-1#comment-5767</link>
		<dc:creator>Norma Jane Browning</dc:creator>
		<pubDate>Tue, 09 Feb 2010 01:27:54 +0000</pubDate>
		<guid isPermaLink="false">http://philosecurity.org/?p=2986#comment-5767</guid>
		<description>This is exactly the letter I got from BofA today.  So -  from what  I understand, if I used my card at Wal-Mart and their security was breeched then so was mine.  Which might mean it could be breeched again and I woud again be vulnerable.  At any rate, I feel okay about it since they guarantee I will not be liable for fraudulant charges.</description>
		<content:encoded><![CDATA[<p>This is exactly the letter I got from BofA today.  So &#8211;  from what  I understand, if I used my card at Wal-Mart and their security was breeched then so was mine.  Which might mean it could be breeched again and I woud again be vulnerable.  At any rate, I feel okay about it since they guarantee I will not be liable for fraudulant charges.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
