Credit Card Issuer TCM Bank Leaked Applicant Data for 16 Months
Summary: TCM Bank, which helps more than 750 small and community U.S. banks issue credit cards, said a website misconfiguration exposed the names, addresses, dates of birth and Social Security numbers of applicants who applied between early March 2017 and mid-July 2018. TCM said it learned of the issue on July 16, 2018 and fixed it the next day, and its attorney Bruce Radke said fewer than 10,000 consumers were affected and declined to name the third-party vendor, citing contractual prohibition.
What you should know: The exposure ran for roughly 16 months before anyone noticed, and the vendor whose site held the data cannot be named - so the affected applicants, and the 750-plus banks whose brands sit on those cards, have no way to know who actually held their Social Security numbers.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026