3,000 affected by Fort Worth water utility data breach

The Fort
Worth, Texas Water Department is notifying about 3,000 customers that their
payment information may have been exposed during a data breach.

The utility reported
that payments made between August 27, 2019 and October 23, 2019 were included
in the breach and the content exposed included cardholder’s name, credit card
billing address, credit card number, card type, credit card security code (CVV)
and card expiration date.

The only customers
affected were those who entered their payment card information for a specific
payment, those who had set up a recurring payment plan were not involved unless
they entered a new payment card during the period in question.

The breach
occurred at CentralSquare, the vendor the water department uses to interact
with the Click2Gov software that powers the H2Online payment system. The
malware has been removed from CentralSquare’s system and the utility is
continuing its migration away from Click2Gov to the Paymentus system.

Click2Gov itself was hit with a separate data breach in September 2018 that affected many of its municipal customers.