Mainebiz

W W W. M A I N E B I Z . B I Z 31 A U G U S T 8 , 2 0 1 6 C O R P O R AT E P R I VA C Y & S E C U R I T Y F O C U S Credit Union in Portland, Ore., stopped allowing its members to withdraw cash from 7-Eleven ATMs. Rise of the clones ough Chretien of York County FCU says he wishes he had known about the illegal activity in neighboring states so he could have been more proactive, the fi rst discovery of skimming at the headquarters drive- through was by luck. A service person working on the terminal that Saturday discovered the skimming hardware before those who installed it retrieved and cloned it, so no customer card information was stolen. Chretien fi gures the skimmer was installed in the early morning hours that Saturday, May 28. But that discovery led to a not-so-fortunate incident at a walk-up teller machine at a York County FCU in downtown Sanford that had been compromised earlier, on May 21, and discovered later, on July 10. e skimmer had been removed by the perpetrators, and customers were posting complaints about losses on Facebook. e credit union put a notice on its website and on social media, Chretien says, as well as issued a press release. Chretien says all customers aff ected by the attack have been made whole, and anti-skimming hard- ware has been added to the credit union's terminals that will cause the ATM to stop if someone tries to unscrew a panel or insert something other than a credit card. He would not comment on how many customers were aff ected or the amount skimmed. He adds that the perpetrators of the Memorial Day skimmer installation were identifi ed through the credit union's security cameras, but he does not know if the Maine State Police or Secret Service has those involved in custody. He is not sure who installed the other skimmer or their status. Chretien says State Police or the Secret Service have the device. "Once we identifi ed the device and how it happened, we looked at how to mitigate future risk. We worked with our vendor to purchase anti-skimming hardware." Such hardware comes with newer ATMs, but can be fi tted onto older ones. e credit union, established in 1954, has 21,000 members, 85 employees and fi ve branches in Maine as well as $247 million in assets. Chretien says it is one of the three fastest-growing credit unions in the state, adding more than 1,000 members a year. It is the eighth-largest credit union by assets in the state. Restitution costs Skimming not only costs banks and credit unions to make aff ected consumers whole and to beef up their security. It also requires hours of bank staff explain- ing to customers whether their account was breached, whether their money will be safe in the future and how to protect themselves in the future by changing passwords often and other means, Chretien says. Chretien says he's surprised about how brazen some of the thieves are. " ey wear a baseball cap, but they look right into the video," he says. "And we can't necessarily prove fraud resulted from the situa- tion. e people who do this do a very good job." He says federal examiners have been focusing more on cybersecurity over the past three to fi ve years. It can cost $300,000 to $500,000 per year for a bank or credit union to mitigate risks, Chretien says. " at's a lot more than 10 years ago. But it's a cost of business." L V, Mainebiz senior writer, can be reached a t @ . a n d @ LV York County Federal Credit Union and other fi nancial institutions are retrofi tting ATMs with anti-skimming devices. Above, in some cases thieves are outwitting the banks with devices meant to look like standard ATM technology. The device on the left was the thieves' version, adapted to fi t over a standard ATM casing. Note the plastic lip at the top. To learn more about skimmers go to: krebsonsecurity.com/all-about-skimmers/ P H O T O S / K R E B S O N S E C U R I T Y. C O M because when women and girls thrive, communities prosper Sunday, August 21, 2016 The Power of She All Women's 5K Race to benefit the Maine Women's Fund Race Start: 9:00 AM University of Southern Maine Portland Campus Come celebrate the power of what a woman can do! Register today! www.thepowerofSHE10K.com Casual Dining Restaurant Franchise Available Interested candidates should send an email with resume attached to MaineFranchiseNow@gmail.com. Going concern, fully staffed and stocked Casual Dining Restaurant Franchise available in Southern Maine. Located in a high traffic area with area businesses, amusement park and other entertainment venues nearby. Restaurant is operating and part of a known brand and franchise system, and design is fully updated and in excellent condition. Rent and Utilities are very reasonable. This is a turnkey, step-in opportunity for the right owner/operator with strong financials and prior full service restaurant operating experience. Fighting back

• Cover