Card info leaked - how to find out?

[Anonymous]

Yesterday I had an unauthorised charge for the first time in my CC journey. It's my double cash card. Received transaction text alert at midnight. I immediately called citi, reported fraud and was issued a new card. Now waiting for the new account to be fully set up in 3 days. (This process with Citi is really not streamlined).

*Pending BIG CARP TACKLE 918-331-9047 OK

SPORTING GOODS STORES

$ 642.84

The only clue the representative had on record was that the purchase was made online. I always have all my cards in possession so surely no physical card was swiped. I live by myself and absolutely nobody looked at my cards except merchants, so now it baffles me how my card info was leaked.

How do I find out? Does "BIG CARP TACKLE" sound familiar to you? Have you had your card info stolen at any of the following merchants? Do criminals ever get caught?

I purchased from only a few merchants in the past 30 days and here's the list. Hopfully it's not target that did it again. 

Cleared	04/21/2015	USPS 24009002128801033 BOSTON        MA	6.35
Cleared	04/18/2015	TM *WIRE               800-653-8000  NY	49.70
Cleared	04/08/2015	COMCAST BOSTON CS 1X   800-266-2278  NH	39.99
Cleared	04/02/2015	GOOGLE *TM *TICKETMAST 855-492-5538  NY	25.85
Cleared	04/01/2015	AMERICAN EXPRESS SERVE 8009540559    FL	200.00
Cleared	03/28/2015	VESTA  *T-MOBILE       888-278-3397  OR	31.88

These I believe are safe, as I've had repeated transactions with them.

Cleared	04/29/2015	YAFA A PEN COMPANY     818-704-8888  CA	57.49
Pending	04/27/2015	ENTERPRISE SOMERVILLE MA	300.00
Cleared	04/21/2015	SULLIVAN TIRE CO       BOSTON        MA	343.17
Cleared	04/17/2015	BRIGHTON MUSIC HALL    BOSTON        MA	30.00
Cleared	03/31/2015	TARGET        00014415 SOMERVILLE    MA	1000.00
Cleared	03/28/2015	NEW ENGLAND AQUARIUM C 617-973-5456  MA	26.45

These I'm unsure. Some are first-time, and some are small local businesses

[Anonymous]

Only time we ever had it happen it was with a small local business (restaurant/bar). I had several friends and colleagues all get their cards compromised at the same time. IIRC it was Christmas eve when my CU called me about it. I think the story was it was their processor or outside bookkeeping service or something like that. 

[Anonymous]

That's possible. Merchants and processors have the capability to save card details if magnetic strip was swiped, and to re-use the card afterwards for fraud.
Starting Oct 1st I'll use chip whenever I can.

[Anonymous]

People can also steal your cc info if you use public wifi. 

[Anonymous]

---

@Anonymous wrote:

People can also steal your cc info if you use public wifi. 

---

I almost never use public wifi (tethering from phone 4G). When checking out online, I always make sure it's SSL encrypted.

[gdale6]

I would not rule out internal fraud, its always possible a bad apple works at the bank.

[SGR]

My CSP info was stolen as well and used online. It's random because I read up on card skimming and it seems the information needed to do online purchases isn't stored on the magnetic strip of the card. This is especially true for financial sites such as Xoom and Paypal. As a result, the information would have had to of been obtained through public records or through some sort of exploit resulting of a leak. A public records search wouldn't have been possible on my card because I have an incredibly common name and the address I use on my cards does not match the address listed on my state ID and passport (I have multiple addresses).

This is purely speculation on my part but I suspect there has been another financial leak that hasn't become public yet.

[Anonymous]

I worked at a place two years (will remain un-named) ago that someone hacked somewhere into there network and every time a card was swiped, the info went to CCC as usual but a copy of there info also went to the hacker.

Turned out to originally hack into the network they hacked into a wi-fi printer then into a computer that was connected to the printer, then they were good to go.

There are crazy ways anyone get our info

[vikingred]

My Walmart MC just got hit tonight.  Person had my CC# and called CS today at 4:30pm, had customer service change the address on the account, and purchased $1400 worth of still from apple store, and 700+700 from "mobile telesales" boost moble (simply wireless).  I spoke to CS after getting an alert, and so their fraud team is on it.  They would not tell me the address it was changed to, only that it's somewhere in AL.   So I called Apple and they did a fraud report and said the shipment will be stopped before it reaches the crook.  I trued calling "mobile telesales" and all I get is automated system.  SO pissed.  But they say I won't be responsible.  I just don't want the crook to get the loot.  Oh, and Walmart/Synchrony and Apple both said by law they cannot give me the fraudulent address because of liability if I retaliate!  crooks have rights!!  My god.

[Blodreina]

---

@vikingred wrote:

My Walmart MC just got hit tonight.  Person had my CC# and called CS today at 4:30pm, had customer service change the address on the account, and purchased $1400 worth of still from apple store, and 700+700 from "mobile telesales" boost moble (simply wireless).  I spoke to CS after getting an alert, and so their fraud team is on it.  They would not tell me the address it was changed to, only that it's somewhere in AL.   So I called Apple and they did a fraud report and said the shipment will be stopped before it reaches the crook.  I trued calling "mobile telesales" and all I get is automated system.  SO pissed.  But they say I won't be responsible.  I just don't want the crook to get the loot.  Oh, and Walmart/Synchrony and Apple both said by law they cannot give me the fraudulent address because of liability if I retaliate!  crooks have rights!!  My god.

---

I'm wondering how they changed the address.  How did they verify whatever info was asked for when they called?