Purdue University has been notified that 450 of the Travel credit cards may have been impacted by a supplier compromise. IF you were one of those individual cardholders you should have received an email (below) please take the appropriate action as soon as possible. If you did NOT receive the email then your card was not affected and no further action is needed. To: Purdue Travel Cardholder From: Maura B Kennedy, Payables Administrator, Purdue University Purpose: Email to request notice that cardholder account should be excluded from February 5 closure and re-issue Timing: Between February 5 and February 15 Subject line: Time Sensitive - Your action required: Merchant security Incident impacted your commercial card account ------------------------------------------------------------------------------------------------------------------------------ We were recently notified that your commercial card account was impacted by a merchant security incident. A merchant security incident does not necessarily mean that fraud has occurred. However, the information that was compromised could potentially result in fraud. The information compromised may have included card numbers, the card expiration dates, the three-digit security codes and cardholder names. This was not a Chase or J.P. Morgan security incident. To protect the account from unauthorized use, on Friday, February 5, the account will be closed and a new card issued. Your replacement card is scheduled to be mailed by Friday February 12. Once the account is closed, you will not be able to transact on it until the new card is received and activated. You should expect to receive your new card by Monday, February 15. You should destroy the impacted card and activate the new card as soon as it is received. If you will be traveling or have an urgent business need for your card during this time, you must contact me via email by end of day Tuesday, January 26 at Tcard@purdue.edu<mailto:Tcard@purdue.edu>. If your account is excluded from closure, you will be contacted by the J.P. Morgan or Chase fraud prevention team to determine a convenient date for your account to be closed and re-issued. A letter notification of the incident and the action being taken will be mailed to you on Thursday, February 5. If you notify me by Tuesday, January 26 at Tcard@purdue.edu<mailto:Tcard@purdue.edu> that your account needs to be excluded from closure, you can disregard that letter. If you do not notify me, your card will be blocked as described above. If you have additional questions, you may contact J.P. Morgan / Chase anytime at the number on the back of your card. If you're outside of the United States, call them at 1-800-270-7760. Maura B. Kennedy Purdue University Payables Administrator Phone: 765-494-7378 Fax: 765-494-1379