Itís an almost weekly occurrence: On Tuesday, Goodwill said its computer systems may have been hacked, leading to the possible theft of customersí credit and debit card information. The nonprofit agency, which operates 2,900 stores in the U.S., said itís working with federal investigators to look into a possible breach.
That follows news over the weekend that Vendini, an event ticketing service, had settled a class-action suit related to a data breach in 2013.
For many people who had ordered tickets through the service, an email about the settlement was their first notification that their information had been compromised. In the last year, major companies like Target, LinkedIn, eBay and Neiman Marcus have also been hacked.
The incidents are especially troubling to consumers as online and mobile shopping continues to grow. People arenít likely to stop using credit and debit cards any time soon, and as data breaches become increasingly common, consumers donít often know what to do when a company theyíve done business with experiences a breach.
Here are five ways you can avoid becoming a victim of identity theft ó even if your data has been compromised:
■Monitor your bank statements. The easiest and most effective way to make sure someone hasnít made fraudulent charges to your account is to keep a close tab on your bank statements. Gartner analyst Avivah Litan recommends checking at least once a month, if not more, for any suspicious activity.
■Use a credit card, not a debit card. Government regulations protect you from liability for fraudulent charges over $50 when you use a credit card or a debit card with a signature, not a pin number. But if you use a debit card with a pin, the regulations are murkier, and you may end up being liable for some charges.
■Get free credit monitoring. Concerned consumers can pay an organization for credit monitoring, but the government offers three free credit checks a year, something consumers should take advantage of, says Litan. The reports will show if any loans or new credit cards have been taken out in your name. Hereís where to find free credit reports: www.annualcreditreport.com/index.action
■Bank smarter. Many banks offer a service that sends an email alert when any major changes ó or charges ó are made to a customerís account. The alerts can be very helpful in detecting identity theft. If you want to be extra cautious, donít make money transfers online or pay bills electronically ó use a check. ďPaper is much more secure,Ē says Litan. Also, experts recommend changing your passwords often. And never use the same password for banking that you use for lower-security websites. Non-banking sites tend to be easier to hack.
■Donít rely on companies. Vendini, the latest company to report a data breach, on Friday scored a rare settlement for a class-action lawsuit about compromised data. The company will pay out up to $3,000 per customer for identity theft losses, but it will be difficult for people to collect their money, because it is necessary to prove that the information that was used for identity theft came from Vendini. The lesson: Donít depend on companies to let you know if your data has been stolen.