Major Data Breach Puts Millions At Risk

If the market meltdown, housing and bank crises weren't enough, U.S. consumers can now add the potential of massive credit and debit card fraud to the list financial concerns. A major processor of credit card transactions just disclosed its system had been hacked, putting millions of consumers at risk.

--------------------------------------------------------------------------------

The cyber-thieves went straight to the heart of one of the biggest and most respected credit and debit card processing companies in the country, Heartland Payment Systems of Princeton, N.J.

"It could be the largest breach ever," said cyber law attorney Andrew DeVore. "It would dwarf the largest prior breach."

Sources tell CBS News that hackers cracked Heartland's computers as far back as May of last year. But it wasn't until last week, after being alerted to suspicious activity by Visa and MasterCard, that the company uncovered malicious software in its system.

Heartland, which acts as a middle man between retailers and banks, processes 100 million transactions per month at an estimated 200,000 merchants nationwide - mainly gas stations, bars and restaurants.

The company says about it has alerted about 150,000 of them, but CBS News found several that didn't learn about the breach until we told them.

"I'm disappointed from that point of view that they wouldn't be up front and proactive. Because customers trust us to protect their records and they are the keeper of the record,'' said bar owner Peter O'Connell.

I think the release of information was a bit manipulative in the timing.

Security analyst Avivah Litan of Gartner GroupNow there are concerns the public company has downplayed the danger to untold millions of consumers.

"I think the release of information was a bit manipulative in the timing," said security analyst Avivah Litan of Gartner Group. "It was released on inauguration day, but the incident was known about for days before that."

The president of Heartland originally agreed to an interview with CBS News before canceling. We wanted to ask why the company's inauguration day in which it didn't even mention that millions of credit card numbers and expiration dates - the only information needed for fraud - were stolen.

Only today did Heartland say it doesn't know how many card numbers were compromised. It's only advice was for consumers to check their own statements to make sure they're not the latest victims of financial fraud.

Fake Stimulus Check Scam

The government hasn’t even voted on whether you might get another economic stimulus check, but the Department of Consumer Affairs says scam stimulus checks are hitting South Carolina mail boxes.

Consumer Affairs says the scam begins with a fake rebate check for $7000 and tells you to register for a secondary stimulus check. Investigators say not only will you be out any money you spend from the fake check, but you’ll give your personal information to the scammers who could steal your identity. Add to that, if you call the phone number, a message will try to sell you information on how to make money on foreclosures for fifty bucks.

Said Charles Ellison with the Department of Consumer Affairs, “They’re trying to sell you a packet of information to tell you how to make money on foreclosed homes. Making outrageous claims, government programs to buy foreclosed homes, things of that nature that are just completely bogus.“

If you receive this stimulus check scam, you should not try to cash the check. Instead report it to Consumer Affairs at (800) 922-7594.