<?xml version="1.0" encoding="UTF-8"?>
<incident>
  <arrest type="boolean">false</arrest>
  <breach-type-id type="integer">2</breach-type-id>
  <comments-count type="integer">5</comments-count>
  <data-family-id type="integer">1</data-family-id>
  <data-recovered type="boolean">false</data-recovered>
  <disputed type="boolean">false</disputed>
  <fringe type="boolean">false</fringe>
  <fringe-description nil="true"></fringe-description>
  <id type="integer">22</id>
  <lawsuit type="boolean">false</lawsuit>
  <records type="integer">0</records>
  <submission-id type="integer" nil="true"></submission-id>
  <updated-at type="datetime">2009-03-26T06:20:51Z</updated-at>
  <user-id type="integer" nil="true"></user-id>
  <breach-types type="array">
    <breach_type>
      <name>Web</name>
    </breach_type>
    <breach_type>
      <name>Web</name>
    </breach_type>
  </breach-types>
  <data-types type="array">
    <data_type>
      <short_name>MISC</short_name>
    </data_type>
  </data-types>
  <timeline-items type="array">
    <timeline_item>
      <first_date>2002-03-29 00:00:00 UTC</first_date>
      <type>Organization reports incident</type>
    </timeline_item>
  </timeline-items>
  <vector>
    <name>Outside</name>
  </vector>
  <primary-organization>
    <business-type-id type="integer">3</business-type-id>
    <freebase-cached-data type="yaml" nil="true"></freebase-cached-data>
    <freebase-description nil="true"></freebase-description>
    <freebase-pref-name nil="true"></freebase-pref-name>
    <id type="integer">18</id>
    <is-private type="boolean" nil="true"></is-private>
    <name>United States Government</name>
    <stock-symbol nil="true"></stock-symbol>
    <updated-at type="datetime">2008-07-14T22:17:00Z</updated-at>
  </primary-organization>
  <secondary-organizations type="array"/>
  <summary>
    <summary>Allowed remote Internet users to browse documents ranging from  correspondence to online order data</summary>
  </summary>
  <comments type="array">
    <comment>
      <content>Found this Visa announcement from 2-11 describing an undisclosed breach that is not Heartland:

http://www.cbai.com/news/VisaAnnouncesAnotherDataBreach.htm

Has anyone heard anything on RBS WorldPay finding a second breach in their CC processing while investigating the pre-paid breach that was already announced?

Are they trying to avoid the double whammy while they announce the big sell-off of assets and a return to retail banking this week?

Hmmm... Difficult to see the future is.
</content>
      <created_at>2009-02-24 07:46:28 UTC</created_at>
    </comment>
    <comment>
      <content>You can bet that there will be A LOT more major breaches coming to light in the near future.  The question is will the processors go public with the details or try to bury it.  I do commend Heartland for going public with their breach and pushing for true end to end encryption.  </content>
      <created_at>2009-02-24 12:02:15 UTC</created_at>
    </comment>
    <comment>
      <content>Maybe they haven't put out a Press Release announcing a breach because ... there hasn't been a breach.  Just because malicious software made it onto a system ... doesn't mean that card holder data made it out.  No data going out means, No Breach.  No Breach ... No Press Release.</content>
      <created_at>2009-02-24 14:36:35 UTC</created_at>
    </comment>
    <comment>
      <content>I know of 3 different credit unions/small banks in norther New England that have been reissuing cards in the past week or so.  Maybe we could track narrow it down by posting institutions involved....</content>
      <created_at>2009-02-26 05:54:58 UTC</created_at>
    </comment>
    <comment>
      <content>Our BOA visa credit card was breached with charges to itunes, napster, Sci stamps, then creditline.com. Fortunately, BOA locked it before real damage was done. Does anyone know if this is a larger problem than our one credit card?</content>
      <created_at>2009-03-25 19:57:43 UTC</created_at>
    </comment>
  </comments>
  <location>
    <address>USA</address>
    <thoroughfare_name></thoroughfare_name>
    <dependent_locality_name></dependent_locality_name>
    <locality_name></locality_name>
    <sub_administrative_area_name></sub_administrative_area_name>
    <administrative_area_name></administrative_area_name>
    <postal_code_number></postal_code_number>
    <country_name_code>US</country_name_code>
    <longitude>37.0902</longitude>
    <latitude>-95.7129</latitude>
    <accuracy>1</accuracy>
  </location>
</incident>

