First Data Corporation

Under Review: 
No Review
Date Breach Made Public: 
May 11, 2012
Atlanta , GA
United States
Records Breached: 


Breach Total Number: 
15 399
California Attorney General
Year of Breach: 
Type of organization: 
Type of breach: 

On April 25, 2012, First Data learned that certain limited personal information about approximately 108,500 merchants who currently process with First Data or who applied for processing services had been shared outside of the company. The names, addresses, and Social Security numbers of merchants who submitted applications to First Data for merchant processing services were purposely disclosed to an outside party in January and February of 2012.  First Data later discovered that this action was not clearly permitted in some merchant contracts.

UPDATE: (5/29/2012): Bank of America Merchant Services (BAMS), a joint venture between First Data Corporation and Bank of America, was also involved in the breach.  The personal information of 15,399 California residents was involved.  Of the 15,399 California residents affected, a total of 4,058 residents were merchant customers of BAMS.