UCF Malware Hack

ORANGE COUNTY, Fla. - Investigators at the University of Central Florida have identified at least one source of a hack that resulted in more than 200 reports of credit card fraud on campus.

After going through 240 online reports, university officials realized that two on-campus restaurants were consistently listed as places where cards were used before the fraudulent charges showed up.

After additional investigation, officials reported finding malware on the computer systems of AD Food Services, which operates Asian Chao, Huey Magoo’s and Corner Café in the UCF Student Union.

The Secret Service even teamed up with UCF to help fix the problem.

“Now if I buy something, I’m going to keep an eye on my account,” Searia Crea said.

The university instructed AD Food Services to stop taking credit or debit cards for orders until security measures are addressed.

PREVIOUS STORY:

Dozens report fraudulent charges after using credit cards on UCF campus

“Although credit card security is the responsibility of each vendor via their chosen banking relationship, UCF police, business services and the information security office have been working with vendors on campus during the past couple of weeks,” the university said in a news release. “The university instructed vendors to review all of their financial systems and offered the assistance of its technology teams.”

Joseph Lee told Channel 9’s Janine Reyes he recently had fraud on his account, but since he didn’t know where his card was compromised, he said he never filed a report.

“I'm just assuming it happened here. Because I don't use debit cards to get gas. I use credit cards which has the chip in it, and I use debit cards at places that I trust,” Lee said.

Based on results of the investigation so far, UCF officials said it does not appear that any of the fraud originated in university-controlled areas, including class registration, financial aid or housing, or at other vendor locations on campus.

The credit card fraud case is not connected to a cyberattack carried out against UCF earlier in the year, the university said.

Anyone who believes that they have been the victim of credit card fraud should contact the company that issued the card immediately, UCF said.

“If you guys wouldn’t have come up to me, I probably wouldn’t have known,” Sarah Injo said.

Injo said she didn’t know about the credit card fraud until last week.

“I was buying stuff for the hurricane and my card was declined,” Injo said.

The university said it plans to send out an email, but officials have not said when.

© 2016 Cox Media Group.