NEW: Kilmartin Hits Epsilon After E-Mail Security Breach

Wednesday, April 06, 2011

GoLocalProv Business Team

In response to the growing list of companies impacted by a security breach at Epsilon Data Management, Attorney General Peter F. Kilmartin is urging Rhode Island consumers to screen emails carefully and not to respond to requests for personal or account information, including login names or passwords.

On March 30, 2011, Epsilon began to notify its corporate clients of a security breach in which potentially 40 million customers may have had personal identifying information compromised by a security breach. It is believed that the breach is limited to names and emails only, however information regarding the breach continues to develop.

Epsilon sends more than 40 million emails annually to customers of their more than 2,500 corporate clients. Among those clients reportedly affected by the breach are Ameriprise Financial; Best Buy; Brookstone; Capital One; Citi; Disney Destinations; Home Shopping Network; JP Morgan Chase; Kroger; LL Bean Visa Card; Marriott Rewards; McKinsey & Company; New York & Company; Robert Half Technologies; The College Board (which manages SAT and other college prep services); TiVo; US Bank and Walgreens.

It is believed additional companies’ information has been breached, yet a complete list has not been released by Epsilon.

AG Wants Full Disclosure

“While at this point there is no indication that financial information was compromised, this is the time when consumers need to be most vigilant and not inadvertently give savvy criminals access to the bank and credit card information,” said Attorney General Peter Kilmartin.

Attorney General Kilmartin sent a letter to Epsilon Data Management requesting the company provide the Office with a full disclosure of the recent security breach of personal information of millions of customers nationwide. In it, he said "I respectfully request Epsilon immediately appraise this office of the full extent of the breach, the companies whose customer information was compromised, and measures the company is taking to prevent a breach of this nature in the future."

Security Procedures Outlined

Attorney General Kilmartin reminded consumers to be cautious of emails that look to be a legitimate email from one of those companies, but it has been sent by a scammer asking for account numbers or other information that could be used for fraud.

Consumers should follow these tips to prevent phishing schemes:

Do not follow a link to a secure site from an email; always enter the URL manually.
Do not enter your bank account number, social security number, credit card number or any other personal information in a web page that you were linked to through an email or text message.
A legitimate financial institution or entity will not ask you to provide personal identifying information in an email or ask you to verify personal identifying information in an email.
If you are worried about your account, do not respond to the email, text, or automated call. Instead, call your financial institution or entity directly from the phone number you have from your personal records, bank statement, phone book or Internet search.
Use a phishing filter.
Use anti-virus and anti-spyware software; use a firewall and update them regularly.
Review credit card and bank account statements as soon as you receive them.

If you suspect that your password on a website has been compromised, call the company immediately to change your password.

The Attorney General's office warns that if believe you are a victim of consumer fraud, to contact the Consumer Protection Unit at (401) 274-4400. You can download a consumer complaint form by visiting the website at www.riag.ri.gov. You can also email the Attorney General's office at [email protected].

If you valued this article, please LIKE GoLocalProv.com on Facebook by clicking HERE.