When KeyBank is notified of a merchant data breach that may impact our clients’ cards, we do not receive detailed information about the specific merchants involved or the nature of the breach. Since the breach happens outside of KeyBank and its systems, we do not have specific details of what occurred. KeyBank is only alerted that a card appears on a list of cards potentially compromised by a data breach at another business, merchant, or institution where the card was used. When that happens, we take proactive action to reissue those cards as a precaution.