Chipotle Mexican Grill Security Breach Alert - May 3, 2017

VISA® has issued an alert for a security breach associated with Chipotle Mexican Grill. Please contact MC EFCU if you feel your card has been affected. 

While no immediate fraud has been detected on member accounts, MC EFCU is taking steps to ensure all members and information at the credit union is protected.

Protect Yourself

Monitor your debit or credit card transactions for any suspicious transactions. Please report any suspicious transactions to MC EFCU as needed.

ATM Card Skimming 

ATMs are often an easy target for thieves to attempt to steal your information. While all MC EFCU ATMs are closely monitored and maintained, please be sure to check over all ATMs before using them.

ATM card skimming is a passive scam used by thieves to collect your card information and record your PIN number. Thieves will place a magnetic strip card reader on, or in front of, the actual card reader on the ATM. This captures all of your ATM or Debit card information as you insert it into the ATM.

From there, a small camera, mounted somewhere nearby, records you entering your PIN to access your funds at the ATM. The thief will then combine both the card information and your PIN to access your accounts and remove funds.

Protect Yourself  

When using an ATM, first check over the visible presence of the ATM for any signs of tampering. Before inserting your ATM or Debit card, try to move or wiggle the card reader. Card skimmers oftentimes are only taped on or adhered weakly – making them easy to remove.

From there, when you go to enter your PIN, do so blocking the keypad with your body and covering the numbers with your other hand. This protects your PIN from being recorded by any cameras or other people around watching you at the ATM.

Street Recruiting 

Recently, there have been reports of people approaching members asking for their online banking information to gain access to their bank accounts in order to deposit a check for them via mobile or ATM transactions. The thief then asks the member to withdraw any available funds in the account as payment for the check deposit, often leaving the member with a few hundred dollars for their troubles.

The checks then turn out to be fraudulent from fake or closed accounts, leaving the member responsible for the loss of the funds on the deposited check. This often results in a negative balance/overdrawn account for the member.

Protect Yourself 

It is important to know that, even after you have withdrawn funds, you are still responsible for the checks that you deposit that are returned unpaid. You should always wait for checks to clear your account before withdrawing funds against them, especially in larger amounts.

You should also never share your online banking username or password with anyone, or perform deposits on behalf of someone else.