Hanover County

Data breach of Hanover's online payment system could put residents' credit card info at risk

HANOVER COUNTY, Va. (WRIC) -- A data breach of the online payment system used by Hanover residents to pay their utility bills has potentially left several customers' credit card information at risk, the county confirmed.  

On Jan. 9, Hanover County was notified by Gemini Advisory that the credit card information of those who made online payments through Hanover's Central Square Click2Gov system had been compromised.   

Gemini Advisory, a group that detects cyber threats online, informed the county that unauthorized individuals were able to take Hanover residents' credit card information to use for transactions. 

The county, according to its governments' website, believes the information entered from Aug. 1, 2018, to Jan. 9, 2019 could be at risk. The information at risk includes names, credit card numbers and expiration dates. 

Hanover County announced it will stop using the compromised Click2Gov server and will conduct a full analysis. A new server and version of the Click2Gov software have been completed and "does not contain the vulnerability that was used to obtain the credit card information," according to the county. 

If you believe you could have been impacted, Hanover County recommends a few steps to make sure and how to protect yourself:

  • Review any credit card and bank statements closely and report any unauthorized charges, no matter how small, to the card issuer immediately. The phone number to call is usually on the back of the payment card.
  • Ask your credit card issuer/bank to deactivate any credit card you used on the Click2Gov website during the affected time period and to issue you a new card.
  • Consider requesting a fraud alert to be placed on your credit file. A fraud alert tells creditors to contact you before they open any new accounts or change your existing accounts. You may call any of the three major credit bureaus listed below. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts. The initial fraud alert stays on your credit report for 90 days. You can renew it after 90 days.
  • Request that all three credit reports be sent to you, free of charge, for your review. Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission recommends that you check your credit reports periodically. Thieves may hold stolen information to use at various times. Check your credit reports periodically to help spot problems and address them quickly. 

Payments made over the phone or automatic withdrawals were not affected by the breach. 

Stay with 8News for updates to this developing story. 

Find 8News on TwitterFacebook, and Instagram; send your news tips to iReport8@wric.com.

Latest Videos

Latest News

Latest Local News

Video Center