High number of cards compromised
#17
Join Date: Feb 2000
Location: NYC&RIC-AA LT PLT w/3.9mm
Programs: Ex-BA Silver; Ex-UA Premier
Posts: 1,135
My CitiAA VISA card was canceled with both telephone and email notification. I told them I had autopay and some recent unposted transactions. Citi said if there was a question about the validity, they would call to confirm. I was not called and all transactions were posted and/or transferred to the new card number billing, even a subsequent autopay.
I think Citi handled it well. The slight inconvenience I had was to look over the recent billings and determine the autopays and go online to change them. I'm sure I will find the old number stored with some merchants. But the good thing is that the EXP date on the card was 05/09; so any I miss will have to be updated in any case.
I was on the road using the card when notified; so it reinforces my rule to always have [at least] two cards with me. And since I have had two[sic] much experience, after the first loss of both, I make sure all my cards are not together.
Like brp mine is the SPG AmEx card (as good or better for AA miles); and I add a third CapOne card for use with foreign currency to avoid the bank surcharges.
I think Citi handled it well. The slight inconvenience I had was to look over the recent billings and determine the autopays and go online to change them. I'm sure I will find the old number stored with some merchants. But the good thing is that the EXP date on the card was 05/09; so any I miss will have to be updated in any case.
I was on the road using the card when notified; so it reinforces my rule to always have [at least] two cards with me. And since I have had two[sic] much experience, after the first loss of both, I make sure all my cards are not together.
Like brp mine is the SPG AmEx card (as good or better for AA miles); and I add a third CapOne card for use with foreign currency to avoid the bank surcharges.
#18
Join Date: Jun 2008
Location: HNL
Programs: AA EXP, too many others
Posts: 45
This happened to me as well but I received new cards before being notified. We were out of the country and had notified Citi with the dates we were going to be gone and never had a problem with the card in Europe. When we returned we had a voice mail on our home phone to call the Citi security department and our new cards were waiting at the post office.
#19




Join Date: Feb 2004
Programs: AA, Hilton
Posts: 111
I had my Citi mastercard replaced in Nov same reason, a mechants systems was compromised and they were issuing new cards as a preventative measure. Major hassle for me changing everything, especially during a time I was travelling.
My biggest complaint, Citi would not tell me which merchant it was so I could quit giving them business. Thought about cancelling the card but didn't try playing that hand. I think they should be obliged to communicate toi us who can't protect their card data.
My biggest complaint, Citi would not tell me which merchant it was so I could quit giving them business. Thought about cancelling the card but didn't try playing that hand. I think they should be obliged to communicate toi us who can't protect their card data.
#20
FlyerTalk Evangelist


Join Date: May 2001
Location: MSY; 2-time FT Fantasy Football Champ, now in recovery.
Programs: AA lifetime GLD; UA Silver; Marriott LTTE; IHG Plat,
Posts: 14,814
My Citi AA Visa was similarly compromised last month. But the new card arrived in the mail, and I had about a 3 week period to call to cancel the old and activate the new. too was frustrated that they blamed a merchant database breach, but would not divulge the merchant.
There's a thread about this in the "other credit card" forum.
There's a thread about this in the "other credit card" forum.
#21
Join Date: Sep 2005
Location: New York
Programs: AA PLT (Lifetime GLD), Hilton Silver, Marriott Silver, AA Dining VIP
Posts: 596
My Citi AA Visa was similarly compromised last month. But the new card arrived in the mail, and I had about a 3 week period to call to cancel the old and activate the new. too was frustrated that they blamed a merchant database breach, but would not divulge the merchant.
There's a thread about this in the "other credit card" forum.
There's a thread about this in the "other credit card" forum.
#22


Join Date: Dec 2002
Location: LI, NY
Programs: AA EXP, AAdv since Day One
Posts: 2,703
That was probably the TJ Max breach (TJ Max, Marshalls). I got a new card on that one as Mrs. inlanikai is a frequent customer of Marshalls.
#23
Moderator: American AAdvantage




Join Date: May 2000
Location: NorCal - SMF area
Programs: AA LT EXP; HH LT Diamond, Matre-plongeur des Muccis
Posts: 62,948
Since this thread seems to only be about AA-related cards, it will be allowed to stand for now. At some point it could relocate to the Other Credit Cards Forum.
/Moderator
/Moderator
#24
Join Date: Nov 2005
Posts: 98
For those of us with Citi/AA cards, this is a pretty scary header that is inaccurate.
#25
Original Poster
Join Date: May 2007
Location: The Emerald City
Programs: 1MM AA - finally
Posts: 362
At the time I chose/posted the title I knew of only myself and a co-worker that both had our advantage cards compromised. Our family has 10 other credit cards that are fine and the coworker is the only other person in my workgroup that has an aadvantage credit card. Hence I was attempting to ascertain if it was specific to aadvatage cards, which is why I ended the title with a ? mark instead of !!!!!!!!
#26
FlyerTalk Evangelist


Join Date: Jul 2003
Location: Florida
Posts: 30,343
I had my Citi mastercard replaced in Nov same reason, a mechants systems was compromised and they were issuing new cards as a preventative measure. Major hassle for me changing everything, especially during a time I was travelling.
My biggest complaint, Citi would not tell me which merchant it was so I could quit giving them business. Thought about cancelling the card but didn't try playing that hand. I think they should be obliged to communicate toi us who can't protect their card data.
My biggest complaint, Citi would not tell me which merchant it was so I could quit giving them business. Thought about cancelling the card but didn't try playing that hand. I think they should be obliged to communicate toi us who can't protect their card data.
It is not necessarily a merchant you do business with.
#27
FlyerTalk Evangelist


Join Date: Jul 2003
Location: Florida
Posts: 30,343
A couple of weeks ago there was a story about a credit card payment clearing house (Heartland Payment Systems) that got breached. Big numbers of cards got potentially compromised. I bet that is the source of all this. I don't think AA per se was the issue as my two cards have not been replaced and are just fine. Rather it is probably where you used those cards and whether Heartland cleared the transaction.
http://www.2008breach.com/
http://www.2008breach.com/
I understand people get nervous when they hear about security breach. And for those who have the habits of storing their cards online for all sorts of autopay or online purchases, a new card number means major pain.
However, in all reality, any autopays will automatically be transferred to the new card number as long as such are pre-authorized. Actually, even fraudulent charge, if it is coded as pre-authorized, recurrent charge, will find its way to the new replacement card even after the old card was closed due to said fraudulent charge! It sounds ridiculous, but that has been exactly what I am told by Chase.
I learn this from a REAL breach on a Chase card - the card was only used twice before a fraudulent charge showed up - since the first usage was to pay AT&T online, and the second usage was in a restaurant - I have to conclude the card info was stolen by the waiter and subsequently sold to criminals. The fraudulent charge came from California, in the form of a health club monthly due. I was lucky to catch it right when it was posted. Chase replaced the breached card with a new one. The next month SAME fraudulent charge showed up AGAIN on the new card. After talking to Chase security dept, I was told, as long as the charge was pre-authorized, and coded as recurrent charge, there is NOTHING Chase can do to prevent it to go to the new card!!! The only way to stop it, is for me to call the merchant to inform it there is a fraudulent usage from its customer on my card! I could not believe what I heard... Once Chase removed the 2nd fraudulent charge I closed the new card for good, and kept the card online for subsequent monitoring. No more fraudulent charge showed up in the next 6 months and I finally deleted it from online.
FWIW, my neighbor's AMEX was also breached. They are seniors, dont do online banking. They found out their card was breached when they received their monthly statement. Close to $20K merchandises were charged on their card. Even after they got their replacement card after reporting to AMEX, they still saw another few thousands fraudulent charges on the following statement, and received the similar answer from AMEX.
#29




Join Date: Sep 2007
Location: stl
Programs: AA LT Ex Plat/8.1mm. WN companion pass. SPG LT Titanium.
Posts: 3,181
i just checked in at sfo for a cx flight to hkg that i bought with my citi mastercard that had been canceled. i bought the ticket 2 months ago and it cost over $5000. for the first time ever, they asked to see my card. when i told them it had been canceled and reissued with a different number they said
they would need to recharge me on another card and refund the original amount. the supervisor who i asked for initially said the same thing. since i have bought dozens of tickets from cx directly in the past the same way, i was a bit indignant with them. basically i said that asking me to give them another $5000 today so that they could refund the $5000 they have already had for two months in three months was a bunch of crap. i then started calling citi on my cell and just as i was explaining the situation to the woman on the phone the agent told me it was ok. interestingly enough i asked the woman from citi if this was a common problem and she said these types of things were usually seamless.
they would need to recharge me on another card and refund the original amount. the supervisor who i asked for initially said the same thing. since i have bought dozens of tickets from cx directly in the past the same way, i was a bit indignant with them. basically i said that asking me to give them another $5000 today so that they could refund the $5000 they have already had for two months in three months was a bunch of crap. i then started calling citi on my cell and just as i was explaining the situation to the woman on the phone the agent told me it was ok. interestingly enough i asked the woman from citi if this was a common problem and she said these types of things were usually seamless.
#30
FlyerTalk Evangelist
Join Date: May 2004
Location: DFW/DAL
Programs: AA Lifetime PLT, AS MVPG, HH Diamond, NCL Platinum Plus, MSC Diamond
Posts: 21,424
My debit card, same account, wasn't replaced. I was told it was related to the company that processed transacations from where she shopped.


