skip to main content
Privacy & Security

Understand Data Compromise

A data compromise is an organized theft of ATM, debit card or credit card information. When this happens, it's primarily because of a data breach on the part of a merchant or a merchant third-party processor, computer theft, stolen storage tapes or company insiders working for a merchant or a merchant's contractor.

How Bank of America is notified of a data compromise

Bank of America receives information from multiple outside sources such as Visa®, MasterCard®, American Express® or law enforcement agencies. Due to the sensitivity of the information involved, detail specific to the breach is not disclosed to the bank, so we are unable to provide the name of the merchant or where the data breach has occurred.

What to expect when a data compromise occurs

We understand that learning your account information may have been compromised can be an alarming experience. Important things to note if your card account data has been compromised:

  • We may proactively close your card and reissue a new one in order to help protect your account
  • It does not mean that fraud has occurred or will occur on your account
  • It does not mean that you have become or will become a victim of identity theft
  • If you notice any fraudulent charges to your account, contact us immediately by calling the number on the back of your card

Depending upon the type of card you have, the data compromise notification process will vary:

What we will do: We will take a proactive approach to protect your account by closing the old credit card account and reissuing a new credit card account. The card carrier will provide important information and will contains the last four digits of the account your new card is replacing. The card carrier will provide important information that will contain the last four digits of the account your new card is replacing.

What you need to do:

  • Activate your new credit card by following the instructions on the sticker on the front of your card so you can continue making transactions without interruption
  • Destroy your old card and start using your new card immediately with your current Personal Identification Number (PIN)
  • If you've set up recurring payments or a store or service provider has your card number on file using your old credit card number, you'll need to provide those companies with your new credit card number and expiration date
  • If you notice any fraudulent charges to your account, please contact us immediately by calling the number on the back of your credit card
  • Destroy any unused Access Checks associated with the old account number

If you are enrolled in Online Banking, there will be these changes:

  • The last 4 digits of your account will change to the last 4 digits of the new account
  • The online version of your statement will show the new account number
  • There will be a limited time (up to 1 business day) where the credit card account information will not be available
  • Once the transition from the old account number to the new account number is completed (up to 1 business day), all functionality and features from your old card will be available on your new card

What we will do: We will take a proactive approach to protect your account by closing the old credit card account and reissuing a new credit card account. You will receive your new card with a new account number and, in some instances, a new expiration date. The card carrier will provide important information that will contain the last four digits of the account your new card is replacing.

What you need to do:

  • Activate your new business credit card by following the instructions on the sticker on the front of your card so you can continue making transactions without interruption
  • Destroy your old card and start using your new card immediately with your current Personal Identification Number (PIN)
  • If you've set up recurring payments or a store or service provider has your card number on file using your old credit card number, you'll need to provide those companies with your new credit card number and expiration date
  • If you notice any fraudulent charges to your account, please contact us immediately by calling the number on the back of your credit card
  • Destroy any unused Access checks associated with the old account number

If you are enrolled in Online Banking, there will be these changes:

  • The last 4 digits of your account will change to the last 4 digits of the new account
  • The online version of your statement will show the new account number

What we will do: We will take a proactive approach to protect your account by replacing your old debit card and issuing a new one.

What you need to do:

  • Activate your new debit card by following the instructions on the sticker on the front of your card so you can continue making debit transactions without interruption

  • Destroy your old card and start using your new card immediately with your current Personal Identification Number (PIN)

  • If you’ve set up recurring payments or a store or service provider has your card number on file using your old debit card number, you’ll need to provide those companies with your new debit card number and expiration date. Keep in mind that your checking account number hasn’t changed.

  • If you notice any fraudulent charges to your account, please contact us immediately by calling the number on the back of your debit card

What we will do: We will take a proactive approach to protect your account by replacing your old ATM card and issuing a new one.

What you need to do:

  • Destroy your old card and start using your new card immediately with your current Personal Identification Number (PIN)
  • If you notice any fraudulent charges to your account, please contact us immediately by calling the number on the back of your ATM card

Answer center

  • When a data compromise affecting your accounts occurs, Bank of America receives information from multiple outside sources such as Visa®, MasterCard®, American Express® or law enforcement agencies. Due to the sensitivity of the information, detail specific to the breach is not disclosed to the bank. Therefore, we are unable to provide the name of the merchant or where the data breach has occurred.

  • Yes. We're replacing your card as a safety measure to help ensure that your account information is protected. The new card has a new account number. Please activate your new card and continue to use it as you normally would.

  • Review your recent transactions and ensure they are all yours. Sometimes a single unauthorized charge may be an error and can be resolved quickly by contacting the merchant. If you see transactions you do not recognize, call the number on the back of your card immediately to report it.