July 31, 2013 – FRAUD ALERT-Harbor Freight Tools Update

1807 West Diehl Road
Post Office Box 3107
Naperville, IL 60566-7107
630.983.3400
800.942.7124
July 31, 2013 – FRAUD ALERT-Harbor Freight Tools Update
LSC had previously reported a compromise at Harbor Freight Tools, a Calabasas, California based chain of 400
retail stores. The company confirmed that they may have been a target of a cyber-attack against their payment
processing system similar to attacks reported by other national retailers. Harbor Freight Tools engaged Mandiant, a
leading computer security firm to investigate the incident.
Please see the Company’s website for more details:
http://images.harborfreight.com/hftweb/pdfs/ProtectingCustomers.pdf
To date, we have received verification from Visa that the following alert is associated with this event:
• US-2013-0752-PA series
Potentially exposed fields may include the following:
• Track 1 Data
• Track 2 Data
The incident is unconfirmed and the forensic investigation has not been completed.
Please keep in mind additional alerts may also be forthcoming pending the outcome of an investigation.
Based on fraud patterns reported, we believe the following MasterCard alert is associated with this event, though
this alert is not confirmed:
•
MCA0527-US-13 series
As with any compromise, it is important that each Credit Union:
•
•
•
•
•
•
Review their fraud alerts from their card processor
Contact members to verify unconfirmed fraud
Start the chargeback procedures, if applicable, when fraud is confirmed
Report fraud to processor
Monitor transaction reports for unusual amounts of transaction volume from states outside your typical
patterns.
Use fraud blocking tools, if available, to write rules to stop transactions where known fraud is occurring.
(Preventative measure)
Please report any patterns of fraud to LSC Card Services or contact us for assistance in writing fraud rules
or other matters. Our contact information is 1-800-304-2273 or email lscriskmgmt@ilcusys.org