Cyber Risks · Krebs on Security

Victim Asks Capital One, ‘Who’s in Your Wallet?’

Summary: Joseph Mier and Associates Inc., a Hammond, Louisiana real estate appraisal firm, lost more than $27,000 in unauthorized ACH withdrawals from its Capital One accounts and is suing the bank to recover the funds. A computer forensics firm Mier hired found no indication his systems were infected with malicious software, and Capital One told him whoever did it used his credentials but did not breach the bank's system.

Key Takeaway: The ACH system authenticates transactions with only a bank account number and routing number, so anyone the firm has ever mailed a check to could have initiated the withdrawals - and the bank's position is that it bears no responsibility.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related