Notice of Potential Data Breach of Wellington Online Water Billing Payment System
Wellington was recently notified about potential unauthorized charges on credit cards used by customers to pay their utility bills. The Village takes the security and protection of its customers’ confidential information seriously.
On June 6, 2018, the Village received a call from our vendor, Superion, notifying us of vulnerabilities in their software. The software problem was with the Click2Gov online payments for utility bills. Credit card information may have been taken during transactions.
The Village immediately shut down our payment connection to Superion and began working with them to determine if our resident’s information was compromised. The forensic analysis is continuing, security patches are being installed and new hardware and software are being installed to eliminate the breach. Even though Superion could not specifically confirm that our customer credit card data has been compromised, the Village decided to notify our customers as a precaution.
What Information Was Involved
What we know right now is that utility bills paid by credit cards between July 2017 to February 2018 may be at risk. The information at risk includes customer names, credit card number, and expiration dates. Payments made over the phone were not affected, only payments made online through the Click2Gov portal.
What We Are Doing
We have shut down our link to Superion’s Click2Gov portal. In conjunction with our vendor, we are upgrading software, security protocols and building a new server. Until we have the online payment system secure and working again, Utility or Building Department payments can be made as follows:
• For Utility Billing, call Customer Service at (561) 791-4010
• For Building Dept. payments, call (561) 753-2430
• Call the Interactive Voice Response at (561) 753-2418
• Stop by the Village Hall located at 12300 Forest Hill Blvd. to pay in person
• Use the drop box outside of the Village Hall located at 12300 Forest Hill Blvd. for Utility payments
What Should You Do?
1. Review any credit card statements closely and report any unauthorized charges, no matter how small, to the card issuer immediately. The phone number to call is usually on the back of the payment card.
2. Ask your credit card issuer/bank to deactivate your card and issue a new card.
3. Request a fraud alert to be placed on your credit file. A fraud alert tells creditors to contact you before they open any new accounts or change your existing accounts. You may call any of the three major credit bureaus listed below. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts. The initial fraud alert stays on your credit report for 90 days. You can renew it after 90 days.
4. Request that all three credit reports be sent to you, free of charge, for your review. Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission recommends that you check your credit reports periodically. Thieves may hold stolen information to use at various times. Check your credit reports periodically to help spot problems and address them quickly.
• Equifax: Equifax.com or 1-800-525-6285
• Experian: Experian.com or 1-888-397-3742
• TransUnion: Transunion.com or 1-800-680-7289
Your confidence and trust are important, and the Village apologizes for and deeply regrets any inconvenience or concern this may cause. We are taking all necessary steps to investigate the potential breach. We will provide updates as additional information becomes available.
As another way to stay informed on the latest news and updates from the Village, residents are invited to sign up for Wellington information and updates at www.wellingtonfl.gov/enews.
For information about other Wellington programs, events, activities, and updates, please visit www.wellingtonfl.gov or watch WellingtonTV for the latest happenings.