WAPA told online bill-pay customers to check for fraudulent card charges after vendor breach

The Virgin Islands Water and Power Authority said on October 30, 2019, that customers who paid electric and water bills online should review their credit and debit card accounts for questionable or fraudulent charges after a third-party payment processor was hit by an apparent cyberattack.

WAPA said it notified its vendor, Central Square Technologies, on October 18, 2019, after a customer reported fraudulent activity on a credit card account following an online payment. The vendor later confirmed a breach and was investigating the scope, cause and remediation of the incident, according to WAPA.

Executive Director Lawrence J. Kupfer said WAPA had provisioned new servers as a precaution and was working with Central Square Technologies to determine how many customers were affected and when the compromise occurred.

WAPA said payments made through self-service kiosks and by phone were not affected.

Official source: https://www.viwapa.vi/news-information/press-releases/press-release-details/2019/10/30/wapa-advises-customers-of-payment-portal-data-breach