DSW today issued the findings from its investigation into the theft of credit card and other purchase information from some of our customers. The theft was previously reported in a March 8, 2005 press release. The data stolen was purchase information from DSW customers who shopped at certain DSW stores primarily between mid-November 2004 and mid-February 2005. The key facts reported below were just verified in the forensic investigation by one of the nation's leading computer security firms.
The key facts as known today are:
Information from 108 stores was stolen. For a list of these stores, click here. The number of stores was initially thought to be 103.
Transaction information involving 1.4 million credit cards was obtained. For each card, the stolen information includes credit or debit card number, name and transaction amount. Neither addresses nor any other information from the credit card users was stolen, as it was not provided at the point of purchase and, therefore, not stored. (No PIN numbers were among the stolen data.)
Transaction information involving 96,000 checks was stolen. In these cases, checking account numbers and driver's license numbers were obtained. Importantly, customer names, addresses and Social Security numbers were not obtained.
Customer information provided through the DSW proprietary Reward Your Style Program or via this web site was not accessed or stolen.
What DSW has done:
Within 24 hours of discovery of the theft, contacted federal law enforcement authorities (the United States Attorney's Office and the U.S. Secret Service). These authorities continue to investigate this crime. DSW is providing all requested assistance and working with the authorities to pursue those responsible for this crime and, if apprehended, prosecuting to the fullest extent of the law.
Within 24 hours of discovery of the theft, contacted and brought in a leading computer security firm, Ubizen (owned by a company named Cyberstart, Inc.) to begin a forensic investigation. The security firm has confirmed that DSW has taken appropriate steps since the incident to prevent any further data theft.
Within 24 hours of discovery of the theft, notified cardholder associations (VISA, MasterCard, Discover and American Express).
Promptly issued a press release alert and posted a customer alert, as well as information and links pertaining to security issues and the theft of personal information, on this web site.
Provided the stolen credit and debit card numbers to American Express, Discover, VISA and MasterCard. VISA and MasterCard provided these card numbers to the issuing banks and American Express and Discover implemented their standard procedures to monitor the cards at risk. Again, the addresses of customers who used credit cards were not taken. With additional effort, DSW was able to obtain contact information for approximately half of the affected credit card customers and is in the process of sending notification letters to each of these customers. The letter advises customers to contact their credit card company or issuing bank for further instructions, and directs customers to other helpful resources.
With respect to checking account information, neither the name nor address of customers paying by check is recorded at the time of the purchase. Therefore, additional research was required to determine a way to provide notice, but DSW has now gathered names and addresses for approximately 88 percent of the affected checking account customers and is in the process of sending notification letters to each of these customers. The letter advises customers to contact their bank for further instructions and directs customers to helpful resources. DSW is also in the process of sending letters to the banks of affected accounts.
Our loyal customers are our highest priority, and we greatly regret any inconvenience this may cause. We take this issue very seriously and will prosecute those responsible for this crime to the full extent of the law.
If a DSW customer suspects unauthorized use of their credit card, debit card or checking account, they should immediately contact their credit card company or issuing bank to notify them of the possible unauthorized transactions. Customers with questions can call the special DSW help line: 1-800-314-0224. Or email us at dswcreditcard@retailventuresinc.com.
Ack - that's me! I shopped at the Alpharetta, GA store in Jan. of this year and used my debit card. *sigh* I will be watching our account *very* closely.
__________________
"Good taste shouldn't have to cost anything extra." - Mickey Drexler
This sucks. We shop there a lot. Sometimes I feel like I should just take out a certain amount of cash every week and just track my spending with cash receipts so that no store has my debit card or credit card on file. identity theft is so frustrating!
__________________
"Go either very cheap or very expensive. It's the middle ground that is fashion nowhere." ~ Karl Lagerfeld
quote: Originally posted by: lorelei "This sucks. We shop there a lot. Sometimes I feel like I should just take out a certain amount of cash every week and just track my spending with cash receipts so that no store has my debit card or credit card on file. identity theft is so frustrating!"
I agree. It might be a safer way to keep your info under wraps. But I still pay bills online. I can't use cash for that.