Back to Bulletin Board

Zippy’s Restaurants Data Incident

May 4, 2018

Debit cards used at Zippy’s Restaurants, Napoleon’s Bakery, Kahala Sushi, and Pearl City Sushi from November 23, 2017 to March 29, 2018 may have been compromised as a result of a data security incident. Visit zippys.com/security for additional information.

COMPROMISED DEBIT CARDS FAQ

1) How was my card compromised?
Debit cards used at Zippy’s Restaurants, Napoleon’s Bakery, Kahala Sushi, and Pearl City Sushi from November 23, 2017 to March 29, 2018 may have been compromised as a result of a data security incident.

2) What action is the credit union taking?
We are providing you with two options:

    1. You may keep your current card and monitor your card activity, or
    2. At your request, your current card may be deactivated (shut down) immediately and a replacement card issued.

3) How long will it take to receive a replacement card(s)?
If you choose to replace your card, it will arrive within 7 to 10 business days. Immediate replacement cards are available at our branches.

4) How do I know which card was affected by the breach if I have more than one card?
Members whose debit cards may have been compromised will be contacted by letter. Only the debit card number that is listed on the letter is affected by this breach.

5) Can I still write checks?
Absolutely!  Checks are not affected and will clear as normal.

6) How can I prevent my card from being compromised?
Unfortunately, your debit card number can never be 100 percent protected when used.  However, we assure you that you’re protected by the Credit Union as long as you use diligence and care when using your debit card for payment.  Proactively monitoring your account(s) through digital banking channels, storing your card in a safe and secure place, setting up notification alerts and reporting your card lost or stolen in a timely manner should also minimize the possibility of fraud.

7) Did fraudulent transactions post to my account?
Only you, the account holder, know which transactions are authorized or not authorized.  Monitor your account closely and report any suspicious activity immediately to us.  If you receive a call, text or email attempting to verify possible fraud activity, please reply accordingly and promptly but remain wary of scams. Remember that HNGCU and APFCU will never ask for account or personal information, including your Social Security Number.

8) What do I do if automatic recurring payments are made through the use of my debit card number?
Recurring payments are only affected should you choose to deactivate or replace your current card.  Upon receipt of your new card(s), you should update your debit card information with all companies you have authorized for recurring payments. Automated Clearing House (ACH) payments using your account number instead of your debit card number WILL NOT be affected. Only payments using your debit card number require updating.

9) Was my member number also compromised?
No. Only your debit card number may have been compromised. Your debit card number does not reference your member number in any way so your member number information is secure.