May 03--A Union League Club of Chicago worker stole payment card information, including names, numbers and expiration dates, from guests by using key-logging software, the institution says.
Key-logging software can track sites that are visited and collect keystrokes and personal data such as account numbers as they're entered.
The club said it learned on March 5 that the worker obtained payment card information of "some of our guests" on "certain" club computers without authorization. It didn't say how many computers or guests, but said guests who used a card from Dec. 10, 2015, to March 2, 2016, should be particularly vigilant about reviewing account statements for unauthorized activity.
The club, nearly 140 years old, said it "promptly" began an investigation after learning of the incident, including hiring a computer security firm to examine its computers.
It said the information involves data found on the magnetic stripe of payment cards and included the cardholder name, card number and expiration date.
"To date, we have no evidence that any of the information copied by the employee has been misused," the club said.
The social club said it has tried alerting members and guests for whom it had contact information, and said it has notified the FBI.
The key-logger software has been removed, and "technical safeguards related to employee access to personal information" are being improved, the club said, adding that the worker, who wasn't identified, has been fired.
FBI Special Agent Garrett Croon said his agency doesn't comment on investigations that might be occurring until charges are filed or arrests made.
byerak@tribpub.com
