HackingFinancial ServicesTechnologyFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedCredentialsPIIHighContained

CheckFree, a business unit of Fiserv, Inc.

bd_ee8a44c6cf0e5e5f · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Dec 12, 2008

To disclose

—

Affected

160,000scope not determined

Confidence

66%

Full breach record for CheckFree, a business unit of Fiserv, Inc. →

Fiserv (via CheckFree business unit) notified New Hampshire AG regarding a Dec 2, 2008 incident where online bill payment traffic was redirected to a malicious site in Ukraine. Approximately 160,000 consumers were potentially exposed to malware attempting to steal credentials. Fiserv provided McAfee remediation and credit monitoring, and notified federal regulators including the FBI and FTC.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 2, 2008

Begins

Dec 12, 2008

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed160,000 affectedView incident

Name: FISERV, INC.
norm: fiserv
Domain: fiserv.com

Name: CheckFree, a business unit of Fiserv, Inc.
norm: checkfree a business unit of fiserv
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Breach occurred: Dec 2, 2008
Materiality determined: —
Notification sent: —
Affected individuals: 160,000scope not determined
Data types: CredentialsPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of InvestigationNotified the three major consumer reporting agenciesNotified the five principal federal financial institution regulatorsNotified the Federal Trade CommissionNotified the Securities & Exchange CommissionNotified the Commodities Futures Trading Commission
Initial access: exploit_public_facing

During the incident: Conducted a consumer notification
Provided a McAfee software solution to detect and remove the offending malicious software
Provided two years of credit monitoring service
Notified the Federal Bureau of Investigation
Notified the three major consumer reporting agencies
Notified the five principal federal financial institution regulators
Notified the Federal Trade Commission
Notified the Securities & Exchange Commission
Notified the Commodities Futures Trading Commission
Changes made: Offered two years of credit monitoring service
Provided McAfee software solution to detect and remove malicious software
Instructed consumers to reset online banking ID/password
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fiserv-20081212.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2008
Raw hash: d5e245f9ad3274a3701b2cd103e305169faaeb04211adf616fec700588b673f1

Reporting entityFISERV, INC.

Victim entityCheckFree, a business unit of Fiserv, Inc.

IncidentUnauthorized Access

Stated responseConducted a consumer notification

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov