Good To Go customers’ credit cards stolen as part of scam totaling nearly $64K

Feb 18, 2016, 11:59 AM | Updated: 10:39 pm
A security flaw allowed an employee working at WSDOT’s Good to Go customer service center to ...
A security flaw allowed an employee working at WSDOT's Good to Go customer service center to steal account holders' credit cards and use them to rack up charges as part of a larger scheme that stole nearly $64,000. (WSDOT)
(WSDOT)

A security flaw allowed an employee working at WSDOT’s Good to Go customer service center to steal account holders’ credit cards and use them to rack up charges as part of a larger scheme that stole nearly $64,000.

Now the State Auditor’s Office is reviewing the tolling system and its security.

WDOT’s tolling system is run by Electronic Transaction Consultants Corporation (ETCC), which has been the center of a series of tolling-related problems, including billing issues in December, delays in launching tolls on the 520 bridge, and glitches involving tickets on the Tacoma Narrows bridge.

“It does call into question, of how safe [are] the credit card numbers at this point,” Good to Go customer John Davis said.

“They’re the state,” Good to Go customer Jill Potter said, “and they’re the government. So I would think it’s somewhat inefficient and outdated.”

Anitra Barquet, 35, took advantage of that system when ETCC hired her through a staffing agency to work at the Seattle Good to Go customer service center in September of 2013.

Little did people know that when they were calling her for help, she was helping herself to their credit card numbers until October 2013.

Barquet used 13 customers’ cards to buy items on Nordstrom’s website. Then she returned the items to a Nordstrom store, getting cash or credit to her bank account.

Documents show she worked with other criminals and got credit card numbers from other jobs from a total of 68 victims.

According to the sentencing document for Barquet, she was found guilty of stealing at least $63,893 through her scheme. Prosecutors said the entire scheme with her co-conspirators caused an actual loss of approximately $160,000. WSDOT told KIRO 7 it asked the Secret Service for the exact amount Barquet charged to Good to Go customers’ credit cards, but the Secret Service declined to provide the information.

The Secret Service investigated and notified WSDOT.

“It appears that her crimes exposed security flaws in the system,” KIRO 7 said to Craig Stone, who was WSDOT’s Assistant Secretary for Tolling at the time of the investigation. Records released via a public disclosure request show Stone sent emails to WSDOT employees about the fraud, including a chronology of the Secret Service investigation.

“So obviously she was able to get some information and exploit it,” Stone said.

Stone said WSDOT sent a letter to 495 Good to Go customers whose accounts Barquet accessed as a matter of her daily work.

The letter said their payment card information was “exposed to an individual associated with an ongoing criminal investigation.” The letter called it “an isolated incident limited to cards processed by a former contractor for ETCC.”

“There’s no way to know what that actually means, quite honestly,” customer John Davis said, examining the letter.

It does not tell the customer how many people were affected or potentially affected. It also does not state that Barquet actually worked in a Good to Go customer service center at the time the events occurred.

“What has been changed that makes the system safer for Good to Go customers?” KIRO 7 asked Stone.

“Part of it is the training,” Stone said. “[It’s] making sure there are not devices and things of that nature that someone can quickly record a credit card number.”

Stone said ETCC has improved how it monitors phone calls and supervises employees.

But WSDOT said according to federal law, ETCC’s background check policy can only go back seven years, which just missed Barquet’s two convictions for attempted theft and theft, in 2000 and 2006.

“Is WSDOT satisfied with the level of security that ETCC is providing here?” KIRO 7 asked.

“I think this is a continual process that we’re working on,” Stone said.

“This is a pattern,” Senator Andy Hill said. “I have no faith they can fix it.”

Hill has tracked problems with ETCC and sponsored a bill to reduce the number of toll lanes on 405. KIRO 7 showed him what it uncovered.

“I was shocked,” he said. “I read through the document. This happened three years ago. This is the first I’d heard about it. I talked to the chair of the Transportation committee. It was the first he’d heard about it. I talked to two other members of the Transportation committee. First they had heard about it … this was something that was clearly swept under the rug.”

WSDOT maintains it notified the chairs of both the Senate and House Transportation committees in 2014.

As for Barquet, she was sentenced to 18 months in prison in spring of 2015. But Hill and WSDOT are still waiting on the state audit of the tolling system, which noted in January 2015 as it prepared for the audit that ETCC still “has not yet demonstrated its full compliance” with security standards. The report was initially slated for release in fall of 2015; it has since been pushed back to March 2016 and now April 2016.

Performance Audit Description

When KIRO 7 asked WSDOT if ETCC was in full compliance now, a spokesperson told KIRO 7 that “ETCC has contracted with a third-party Qualified Security Assessor (QSA) to complete a PCI DSS Record of Compliance (ROC). The assessment and formal ROC is on schedule to be completed in March. ”

WSDOT issued a statement Thursday that said in part, “We take privacy and protection of customer information very seriously” and that “we worked with our vendor to ensure they have internal controls in place to prevent fraud and are continually working to stay up to date with industry best-practices and improve our protocols in order to be prepared for emerging identity theft tactics.”

The department told KIRO 7 that if customers don’t want to use their credit cards, account holders can always refill their accounts and pay tickets by cash at a walk-in customer service center. Customers can also pay through electronic bank transfer or by check. Checks are processed directly by US Bank.

Sign up for breaking news alerts

Local News

foster...
Kathryn Stone

Oregon kidnapping suspect taken into custody after standoff

Law enforcement officials were able to determine that Foster had been accessing dating applications on his phone.
1 day ago
Friends kitchen...
Micki Gamez

The Friends Experience pop-up opens in Seattle on Feb. 1

The FRIENDS Experience invites fans to step inside the world of the iconic series, relive their favorite moments, and celebrate the show.
1 day ago
dead road rage...
L.B. Gilbert

Greenwood road rage fight involved knife, baseball bat

Police are investigating a road rage incident involving a bat and a knife in a QFC parking lot in Seattle's Greenwood neighborhood.
1 day ago
The logo for OpenAI, the maker of ChatGPT, appears on a mobile phone, in New York, Tuesday, Jan. 31...
Associated Press

Cheaters beware: ChatGPT maker releases AI detection tool

ChatGPT is trying to curb its reputation as a freewheeling cheating machine with a new tool that can help detect if artificial intelligence wrote it
1 day ago
lake stevens...
L.B. Gilbert

Case dismissed against Lake Stevens HS employee accused of sexual misconduct

A Lake Stevens School District employee is under arrest after being suspected of improper sexual contact with at least one child.
1 day ago
bristol bay...
L.B. Gilbert

Bristol Bay salmon runs protected as EPA halts mine development

The EPA won a 12-year battle for a cleaner habitat by taking big steps to protect Bristol Bay salmon runs, the most productive in the world.
1 day ago

Sponsored Articles

safety from crime...

As crime increases, our safety measures must too

It's easy to be accused of fearmongering regarding crime, but Seattle residents might have good reason to be concerned for their safety.
Comcast Ready for Business Fund...
Ilona Lohrey | President and CEO, GSBA

GSBA is closing the disparity gap with Ready for Business Fund

GSBA, Comcast, and other partners are working to address disparities in access to financial resources with the Ready for Business fund.
SHIBA WA...

Medicare open enrollment is here and SHIBA can help!

The SHIBA program – part of the Office of the Insurance Commissioner – is ready to help with your Medicare open enrollment decisions.
Lake Washington Windows...

Choosing Best Windows for Your Home

Lake Washington Windows and Doors is a local window dealer offering the exclusive Leak Armor installation.
Anacortes Christmas Tree...

Come one, come all! Food, Drink, and Coastal Christmas – Anacortes has it all!

Come celebrate Anacortes’ 11th annual Bier on the Pier! Bier on the Pier takes place on October 7th and 8th and features local ciders, food trucks and live music - not to mention the beautiful views of the Guemes Channel and backdrop of downtown Anacortes.
Swedish Cyberknife Treatment...

The revolutionary treatment of Swedish CyberKnife provides better quality of life for majority of patients

There are a wide variety of treatments options available for men with prostate cancer. One of the most technologically advanced treatment options in the Pacific Northwest is Stereotactic Body Radiation Therapy using the CyberKnife platform at Swedish Medical Center.
Good To Go customers’ credit cards stolen as part of scam totaling nearly $64K