• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
  • Jobs
  • Career
    • Cyber Security Training
    • Work from Home
    • Cyber Security Analyst
    • Remote Work – Six Ways to Keep Your Data Safe When Working Remotely
  • Field Guide
  • Newsletter Signup
  • Deals
  • News
AskCyberSecurity.com

AskCyberSecurity.com

Cyber Security News & Information

  • Home
  • Data Privacy
    • Gamers
    • Government Cyber Security
      • Legislation
      • Standards
        • What are the risks of computer security?
        • Medical Cyber Security
    • Social Media
  • Security
    • Data Breaches
    • Scams
    • Malware
  • Software
    • Apps
    • Web Browsers
  • Glossary
    • Cyber Security Acronyms
  • About Ask Cyber Security
    • Authors
    • Contact Us
  • VPN
    • How Do I Know If My VPN is Working?
    • Best Free VPN iPhone
    • Why Use a VPN?
    • NordVPN vs IPVanish
    • Private Internet Access Download
    • Best VPN for Streaming
      • TikTok VPN
    • VPN Porn
    • Computer Security Software – What You Really Need
  • Tutorials
  • ChatGPT
    • Does ChatGPT Save Data?
AskCyber Home » News » Corporate Cyber Security » College ID – The Only Card a Hacker Needs

College ID – The Only Card a Hacker Needs

2017-08-15 by Michelle Dvorak

College ID – The Only Card a Hacker Needs

Like many families, I’m packing up my freshman daughter and sending her to a university this fall. We have been absolutely bombarded with mailings from the college she finally accepted, colleges she has not accepted, student credit card offers, to student loan terms. I swear that her college could lower tuition if they consolidated their mailings to once weekly, or moved say 80% to online notifications.

Another mailer showed up today. I have seen this one before except for a different campus, Temple University in Philadelphia and that campus’s onsite bank, PNC Bank. The mailer attempts to sell students on the merits of opening a bank account. In the case of Villanova, it is a Wells Fargo checking account. Fees waived for students! Yay! Villa students can choose to connect their student ID card, their Wildcard, to their bank account. The Wildcard student ID is used for all things a typical student ID Card is good for – events, building access, and dining hall services. According to the literature, the connected Wildcard can then be used for. This way they can use it as a debit card for PIN transactions. For Temple University students, they can open a PNC account and connect it to their campus student ID card, or “Owl Card.” The Owl Card can then be used at ATMs to withdraw cash.

I both cases, connecting the student ID to a campus bank account is an optional service. Both banks provide a service fee free account to all students.

Should I Connect a Student ID Card to a Campus Bank Account?

Both campus banks provide a free bank account to students and then offer some conveniences. PNC allows students to use an ATM for cash with their connected Owl Card. Villanova students have more options. A connected Wildcat card can be used on and off campus as well as for ATM withdrawals.

A while back I wrote about social engineering as a hacking method. Social engineering means using human interaction to gain pieces of personal data. The ultimate goal of social engineering is to gain access to some higher data, like bank account password or other login information. For example, I want to get to someone’s bank account access, one way is to start by working on access to an email account. Since it’s possible the email is one of the ways to reset the online banking password. Crafty hackers can gain access to an email account find finding your email address on social media accounts.

A campus ID hooked to a bank account affords a plethora of personal data that can be used in a social engineering attack. The student ID has a photo which is used to tell use gender. We can also guess at age based on the photo and the fact that the student is enrolled in college. Next, we know the bank name and student’s name. We can surf social media for the student’s name and get more information – date of birth, email address, hometown, pet’s name, etc… All of these are common password reset questions.

So why connect a bank account to an acceptable form of photo ID? Because it’s too easy to get to more information. Reading the “in case of loss” terms on Wells Fargo’s Wells Fargo web page, applicants can see that in the event of card loss, extra steps are needed. This is because the card is so connected. Students must contact their campus authorities and then contact the bank to get the account shut down.

Filed Under: Corporate Cyber Security

About Michelle Dvorak

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers


LinkedInTwitterFacebook

Primary Sidebar

Subscribe to Our Free Newsletter

We Don't Share or Sell Your Info

Web Browsers

Where Are My Saved Passwords in Chrome?

Google Removes 70 Malicious Browser Add-ons from Chrome Web Store

Firefox 75 Reports Your Browser Settings to Mozilla

Categories

Cyber Security Field Guide

Computer Security While TravelingGet Our Cyber Security Field Guide - Available on Amazon!

Recent Posts

Security Marketing Manager – Remote

Sr. Associate, Cybersecurity Architect – Pfizer

Strategic Customer Success Manager – Cybersecurity – Opportunity for Working Remotely

Top 20 Passwords Leaked on Dark Web

ISU Cybersecurity Leader Job Opening

Cyber Security News

Top 20 Passwords Leaked on Dark Web

… [Read More...] about Top 20 Passwords Leaked on Dark Web

Apple Warns of Actively Exploited Zero-Day Flaw

… [Read More...] about Apple Warns of Actively Exploited Zero-Day Flaw

IRS Stops Facial Recognition System for Online Access

… [Read More...] about IRS Stops Facial Recognition System for Online Access

National Cybersecurity Alliance Announces Data Privacy Week

… [Read More...] about National Cybersecurity Alliance Announces Data Privacy Week

More Cyber Security News

Tags

amazon Android Apple bitcoin China chrome CISA credit card DarkSide DHS DOJ Equifax Europe Facebook facial recognition FBI Firefox FTC games GDPR Google Government hacker identity theft India iPhone Iran IRS LinkedIn Microsoft North Korea PayPal phishing phishing email ransomware REvil Russia smartphone T-Mobile TikTok tutorial VPN WhatsApp WiFi Windows

Government

CBP Looks to Access Airline Passenger Data

FTC Releases Cyber Threat Video Playlist

Malware Found on US Government Funded Phones

UK NCA Reaches Out to Youth to Deter Cybercrimes

More Posts from this Category

Footer

Menu

  • Home
  • About
  • Authors
  • Newsletter Signup
  • PRIVACY POLICY

Search

Why Use a VPN?

NordVPN vs IPVanish VPN Review

NAVIGATION

  • Data Breaches
  • Data Privacy
  • Gamers
  • Scams
  • Malware

MEMBER NJCCIC

New Jersey Cybersecurity & Communications Integration Cell

STAY CONNECTED

  • Facebook
  • Instagram
  • Pinterest
  • YouTube
  • Twitter
  • RSS

Copyright © 2023 · AskCyberSecurity.com · METRONY, LLC

Go to mobile version