According to the Texas Attorney General’s Office, 2,726 USAA customers in Texas were compromised in the breach and had not been notified of the exposure, as of Tuesday, June 27. USAA has begun notifying affected customers as of Wednesday, June 28, USAA spokesperson Andrew Femath said in a statement to MySA. Customers compromised by the data breach will be given a two-year membership of Experian’s IdentityWorks program in an effort to mitigate and resolve identity theft.
An investigation revealed that “a limited number” of call center representatives employed by a third-party service contracted by the San Antonio-based insurance and banking giant “improperly shared their USAA access credentials with unauthorized individuals,” the notice reads. The letter was posted to the website for the Vermont Attorney General’s Office’s security breach notice website on Thursday, June 22.
Customer information, including name, address, phone number, email address, date of birth, marital status, gender, driver’s license number, last four digits of the Social Security number, bank account numbers, including debit and credit card numbers, and authentication PIN could be compromised for affected individuals, according to the letter.
The third party-service reportedly notified USAA as soon as they became aware of the breach and “took steps to block the unauthorized access.” USAA is monitoring affected accounts for any suspicious activity linked to the incident and taking steps to enhance security and protect consumers against possible future breaches, the letter reads.
USAA customers suspected to be the victim of identity theft or have questions are asked to call USAA at 877-762-7256.
