Wellington notifies residents of potential online data breach

Share

The Village of Wellington communications department released an email this afternoon warning of a potential data breach of the village’s online water billing payment system.

According to the email, the village received a call from its vendor Superion on June 6, notifying Wellington of vulnerabilities in the Click2Gov online payments for utility bills, stating that credit card information may have been taken during transactions.

In response to this, the village has shut down the link to Superion’s Click2Gov portal, software is being upgraded, as well as security protocols. In addition, a new server is being built.

The entire email is pasted below, which includes what happened, what information was involved, what the village is doing and what village residents should do to protect themselves.

For further information contact:
Liz Nunez

Public Information Officer

561-753-2572

MEDIA RELEASE

JUNE 7, 2018

FOR IMMEDIATE RELEASE

Notice of Potential Data Breach of
Wellington Online Water Billing Payment System

Wellington was recently notified about potential unauthorized charges on credit cards used by customers to pay their utility bills. The Village takes the security and protection of its customers’ confidential information seriously.

What Happened

On June 6, 2018, the Village received a call from our vendor, Superion, notifying us of vulnerabilities in their software. The software problem was with the Click2Gov online payments for utility bills. Credit card information may have been taken during transactions.

The Village immediately shut down our payment connection to Superion and began working with them to determine if our resident’s information was compromised. The forensic analysis is continuing, security patches are being installed and new hardware and software are being installed to eliminate the breach.  Even though Superion could not specifically confirm that our customer credit card data has been compromised, the Village decided to notify our customers as a precaution.

What Information Was Involved

What we know right now is that utility bills paid by credit cards between July 2017 to February 2018 may be at risk. The information at risk includes customer names, credit card number, and expiration dates. Payments made over the phone were not affected, only payments made online through the Click2Gov portal.

What We Are Doing
We have shut down our link to Superion’s Click2Gov portal. In conjunction with our vendor, we are upgrading software, security protocols and building a new server. Until we have the online payment system secure and working again, Utility or Building Department payments can be made as follows:

•    For Utility Billing, call Customer Service at (561) 791-4010
•    For Building Dept. payments, call (561) 753-2430
•    Call the Interactive Voice Response at (561) 753-2418
•    Stop by the Village Hall located at 12300 Forest Hill Blvd. to pay in person
•    Use the drop box outside of the Village Hall located at 12300 Forest Hill Blvd. for Utility payments

What Should You Do?
1.    Review any credit card statements closely and report any unauthorized charges, no matter how small, to the card issuer immediately. The phone number to call is usually on the back of the payment card.

2.    Ask your credit card issuer/bank to deactivate your card and issue a new card.

3.    Request a fraud alert to be placed on your credit file. A fraud alert tells creditors to contact you before they open any new accounts or change your existing accounts. You may call any of the three major credit bureaus listed below. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts. The initial fraud alert stays on your credit report for 90 days.  You can renew it after 90 days.

4.    Request that all three credit reports be sent to you, free of charge, for your review. Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission recommends that you check your credit reports periodically. Thieves may hold stolen information to use at various times. Check your credit reports periodically to help spot problems and address them quickly.

•    Equifax:  Equifax.com or 1-800-525-6285
•    Experian:  Experian.com or 1-888-397-3742
•    TransUnion:  Transunion.com or 1-800-680-7289

Your confidence and trust are important, and the Village apologizes for and deeply regrets any inconvenience or concern this may cause. We are taking all necessary steps to investigate the potential breach. We will provide updates as additional information becomes available.

Show More

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *