Important Member Alert: Kmart Data Breach

First Financial has been notified that some of our members’ Debit and Credit Cards used at Kmart between September 3, 2016 and April 30, 2017 may be at risk.

Gareth Glynne, Senior Vice President of Kmart – released the following statement about the data breach: “We recently became aware Kmart was a victim of a security incident involving unauthorized credit card activity after certain customer purchases at some of our stores. We immediately launched a thorough investigation and engaged leading IT security experts to review our systems and secure the affected part of our network. Our investigation to date indicates our Kmart store payment data systems were infected with a form of malicious code (similar to a computer virus) that was undetectable by current anti-virus systems. Once aware of the new malicious code, we quickly removed it and contained the event. We are confident that our customers can safely use their credit and debit cards in our retail stores. Based on the forensic investigation, NO PERSONAL identifying information – including names, addresses, social security numbers, birth dates and email addresses – was obtained by those criminally responsible. However, we believe certain credit card numbers have been compromised. All Kmart stores were EMV “Chip and Pin” technology enabled during the time that the breach occurred, and we believe the exposure to cardholder data that can be used to create counterfeit cards is limited. There is no evidence that or Sears customers were impacted nor that debit PIN numbers were compromised.

  • View the entire alert message from Kmart here.

If you visited Kmart during this time period and used a First Financial card, we urge you to monitor your First Financial account.  If you would like, please visit a branch location to replace your debit card, or contact our Member Relationship Center at 732.312.1500 to have a new Debit Card ordered.  If you used a First Financial credit card, please call 866.820.3808 to receive a replacement card.

Enroll your First Financial Debit/Credit Cards in Visa Purchase Alerts – you’ll get an email each time your Debit Card is used over an amount you set, when your card is used outside the country, or when your card is used to make a purchase online or over the phone. Credit Cardholders also have the additional option of adding a text alert, this can be set-up in Online Banking under your Credit Card account (select the Communications tab and then Visa Transaction Alerts).

As always, First Financial continues to monitor our member accounts for suspicious activity. If you have any additional questions or concerns, please give us a call at 732.312.1500 or email us at


Add Kmart and Dairy Queen to the Latest Data Breach List and Check Your Statements!

Kmart_logoRecent data breach news reports have Dairy Queen admitting to a breach at as many as 395 stores between August and September 2014, and Sears Holding Co. disclosing that malware at Kmart point-of-sale registers stole customer debit and credit card data.

Kmart customers who shop in its Brick, Manahawkin, Toms River, or Wall, NJ stores may need to check their debit and credit card accounts, after the retailer discovered a data breach last week.

According to an article on, the company announced its payment system had been attacked by hackers who stole customers’ debit and credit card numbers. Kmart discovered the intrusion into its payment system on Thursday – but the investigation shows it goes back to early September 2014, Kmart said in a statement released Friday.

Kmart joins a list of other big companies, including retailers Target, Acme, and Home Depot, that have been attacked by hackers recently.

“According to the security experts we have been working with, our Kmart store payment data systems were infected with a form of malware that was undetectable by current anti-virus systems,” the company said in a statement. “We were able to quickly remove the malware. However, we believe certain debit and credit card numbers have been compromised.”

No personal information, debit card PIN numbers, email addresses, or Social Security numbers were obtained by the hackers, the company said. There also is no evidence that customers were affected. Dairy_Queen logo

In late August, Dairy Queen announced its data breach after it was reported by KrebsonSecurity, which placed the attacks as early as June 2014.

Dairy Queen and Kmart have said there is no indication that Social Security numbers, personal identification numbers, or email addresses were taken in these incidents. Krebs also reported on the malware incident at Kmart, which posted a notice Friday about the malware incident.

In related news, federal investigators reportedly believe the hackers who breached JPMorgan Chase over the summer also stole information from Fidelity Investments, according to the Wall Street Journal. The paper’s sources do not believe the breach of Fidelity was on the same scale as the JPMorgan breach affecting contact information for as many as 76 million households.

First Financial would like to remind our members that your accounts with us are monitored 24/7 by an experienced team of security professionals for any suspicious or potentially fraudulent activity. First Financial employs the most advanced fraud detection and prevention technology to guard members’ credit and debit accounts against unauthorized access and use. Here’s a quick update for your peace of mind:

  • If our security team observes any unusual activity on member accounts, we will contact members immediately to determine whether the transaction activity is legitimate and authorized.
  • It is also a good practice for members to keep a watchful eye on their accounts and transactions and look for any unauthorized activity or purchases.

Don’t wait until it’s too late! Check out First Financial’s ID Theft Protection products – with our Fully Managed Identity Recovery services, you don’t need to worry. A professional Recovery Advocate will do the work on your behalf, based on a plan that you approve. Should you experience an Identity Theft incident, your Recovery Advocate will stick with you all along the way – and will be there for you until your good name is restored and you can try it FREE for 90 days!*

Our ID Theft Protection options may include some of the following services, based on the package you choose to enroll in: Lost Document Replacement, Credit Bureau Monitoring, Score Tracker, and Three-Generation Family Benefit. To learn more about our ID Theft Protection products, click here and enroll today!**

We will continue to monitor all members’ accounts for suspicious activity. If you have any additional questions or concerns, please give us a call at 866.750.0100 or email us at Thank you for being a valued member of First Financial.

*Available for new enrollments only. After the free trial of 90 days, the member must contact the Credit Union to opt-out of ID Theft Protection or the monthly fee of $4.95 will automatically be deducted out of the base savings account or $8.95 will be deducted out of the First Protection Checking account (depending upon the coverage option selected), on a monthly basis or until the member opts out of the program. **Identity Theft insurance underwritten by subsidiaries or affiliates of Chartis Inc. The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

Article Sources: