The personal information of thousands of prepaid debit cardholders in the state may have been stolen, according to state Treasurer Denise L. Nappier. This includes as many as 7,000 people who received their tax refund in the form of a debit card.
Nappier said that JPMorgan Chase is working to contact affected people, who received payments from the state through prepaid debit cards.
Reuters reports that the personal data of 465,000 cardholders may have been captured by hackers.
In a press release, Nappier said:
JPMorgan Chase, provider of banking services to various Connecticut state agencies, has informed my Office that the personal information of some holders of prepaid debit cards may have been exposed, between mid-July and mid-September, during the course of an attack on the bank’s servers which support its UCard website.
… According to JPMorgan Chase, the breach affected cardholders in multiple states, including 14,335 accounts in Connecticut. Published accounts suggest that as many as 465,000 accounts across the country may be exposed. The Connecticut accounts are prepaid debit cards issued by the State’s Department of Revenue Services (DRS), Department of Labor, Department of Social Services, and Department of Children and Families. These cards are issued in place of checks to provide payments such as tax refunds, unemployment benefits or child support payments.
… I am dismayed that JPMorgan Chase delayed informing my Office of this security breach for two and a half months — from mid-September, when they first learned of it, until this week. They should have picked up the phone immediately and called us.