RBI

Bank ATM Credit Debit Card Data Security Breach-Hacking. RBI urges card holding bank customers to change the PIN and passwords periodically

Bank ATM Credit Debit Card Data Security Breach-Hacking. RBI urges card holding bank customers to change the PIN and passwords periodically.

Reserve Bank of India

Date : Oct 24, 2016

ATM/Debit Card Data Breach

The Reserve Bank of India convened a meeting today with senior officials from select banks, National Payment Corporation of India and card network operators to review the steps taken by various agencies to contain the adverse fall out of certain card details alleged to have been compromised.

It has come to the Reserve Bank’s notice on September 8, 2016 that details of certain cards issued by a few banks had been possibly compromised at ATMs linked to the ATM Switch of one of the service providers. The issue is currently being investigated by an approved forensic auditor, under PCI-DSS framework.

The number of cards misused, as per currently available information, is few. As a matter of abundant precaution, card network operators concerned were earlier advised to share the details of cards used during the period of such exposure. Based on this, banks have been taking necessary remedial action to avoid any potential abuse of such cards in future by unscrupulous elements and to protect the interest of their customers. Banks have taken measures including advising the customers to change PIN, blocking payments at international locations, reducing the withdrawal limits, monitoring unusual patterns, replacing the cards and  re-crediting the accounts of cardholders for amounts wrongly debited.

The Reserve Bank urges the cardholding bank customers that it is a good practice to change the PIN and passwords periodically and not to share them with anyone for any reason. Banks do not ask for card or account details from their customers, hence, customers may exercise caution and not reveal such information to any person on phone or email.

The Reserve Bank of India has already issued instructions to banks vide Circular dated June 2, 2016 on Cyber Security Framework in Banks. Banks have once again been advised to review the extant cyber security arrangements. RBI has emphasized an early implementation of this framework so that (i) possibility of such incidents happening in future is minimised and (ii) in the event of such incidents, containment measures are taken immediately.

Alpana Killawala
Principal Adviser

Press Release : 2016-2017/1014

Share

Recent Posts

  • Excise/Custom

Before staying CESTAT order High Court should have framed substantial questions of law – SC

Before staying CESTAT order the High Court should have framed the substantial questions of law and thereafter could have passed…

9 hours ago
  • CA CS CMA

CA issuing Form 15CB not required check genuineness of documents submitted

Chartered Accountant issuing Form 15CB not required check genuineness or otherwise of documents submitted by his clients – Supreme Court…

12 hours ago
  • GST

Ongoing investigation qua absconding person, no ground to deny bail to arrested person

Ongoing investigation qua absconding person, cannot be a ground to deny bail to person against whom the investigations have been…

17 hours ago
  • Income Tax

Accommodation entry operators also obtain PAN, file ITRs, open bank account

Accommodation entry operators also routinely obtain PAN, file ITRs, and maintain bank accounts, to give a facade of legitimacy to…

19 hours ago
  • ICAI

ICAI sets up two new branches : at Morbi and Bhiwandi

ICAI sets up two new branches : at Morbi and Bhiwandi The Institute of Chartered Accountants of India (ICAI) has…

1 day ago
  • Finance Ministry

Govt. notifies amended Protocol of India & Belgium for DTAA & Fiscal Evasion of taxes

Central Government notifies amended Protocol between India and Belgium for Avoidance of Double Taxation and the Prevention of Fiscal Evasion…

2 days ago