MoneyGram data breach: Over 150 million customers were exposed. We’re talking names, addresses, IDs, bank account numbers, the whole nine yards. How’d they do it? Someone pretended to work there and got in. If you’re affected, expect to get a notice offering two years of free identity protection and credit monitoring services.
Everything we know about the MoneyGram breach
Another day, another massive data breach. This time, it’s MoneyGram, a global mega-company that handles money transfers, bill pay and other financial services. They have digital platforms and retail locations, and they even power Walmart’s money-transfer service.
There’s no formal statement yet on exactly how many people were impacted, but we do know MoneyGram has over 150 million customers worldwide.
The whole shebang, exposed
In their official statement, MoneyGram says an unauthorized third party (aka a vendor, hacker or group of hackers) accessed and acquired a ton of personal info between Sept. 20 and Sept. 22. MoneyGram didn’t discover the break-in until about a week later, on Sept. 27.
MoneyGram says the following types of customer data have been compromised:
- Social Security numbers and government ID documents
- Contact information, including email, addresses and phone numbers
- Birthdates
- Bank account numbers
- Utility bills
- MoneyGram Plus Rewards information and transaction information
- Criminal investigation information (like fraud) for “a limited number of consumers”
MoneyGram is working with external cybersecurity experts and law enforcement. It generally takes a few weeks or even months to discover the full extent of breaches like this and all those impacted. In the meantime, they’re providing customers with free identity protection and credit monitoring services for two years.
Whenever a big breach like this happens …
… It’s always a good idea to take a proactive approach with your credit file. If you’ve used MoneyGram before, place a security freeze on your credit report with each of the three major credit reporting agencies. Here’s how:
- Equifax: Visit Equifax.com and follow the steps to freeze online. By phone, call 1‑888‑298‑0045. For snail-mail requests: Print this and mail it to Equifax Information Services LLC, P.O. Box 105788, Atlanta, GA 30348‑5788.
- Experian: To do it online, visit the Experian Freeze Center. By phone, call 1‑888‑EXPERIAN (1‑888‑397‑3742), or submit your request in writing to Experian Security Freeze, P.O. Box 9554, Allen, TX 75013.
- TransUnion: Add a freeze online on the TransUnion website. Call 1‑888‑916‑8800, or mail TransUnion, P.O. Box 160, Woodlyn, PA 19094.
Once you’ve placed the freeze, you’ll get a personal identification number or password to temporarily lift or remove the freeze. Make sure you keep this info in a safe place.