I set up an account through my Bank for Billpay to pay my Electric bill each month about 10 years ago,  it worked well and Entergy Electric billed me through my hotmail account for years with no trouble. at the time I set up the account I wrote down my username and password which worked great until I received my April 2012 bill.  normally the bill says click the red button to pay,  this one said that too but there was no red button,  just a link to view bill, I clicked the link and it went to what looked like my regular bill pay.
 Then when I typed in my user name and password it said no such username and password exists.  I tried it again watching as my password dots appeared as I typed,  7 dots appeared and as I typed the other 4 letters into it no dots appeared,  it was limiting me to 7 letters when my real password had 11 letters,  the last 4 would not show.
  Then when I ask for help signing in it directed me to a page where they wanted all my personal information again, including name,  address, Entergy account number, social security number, date of birth, and home address. that is when I looked for a way to call them and that 800-564-9184 number showed up.  I called it and the guy wanted all my information like the page ask for, so I told him where he could stick his phony site.

I received the email and responded to it with my name and my name and number.  I was emailed and did sign in, had trouble, changed pswd, and still codnt sign in.  I have not signed up for checkfree, but they had a company that is correctly an account of mine.  I think I've been had.

Got a Spam email with that number in it.

There is also a hard copy letter being sent around which says the same thing. Found it in my snail mail today. I was immediately suspicious, as the only electronic bill paying I do is to my insurance and cable companies-through their sites.

Just an FYI The incident is NOT bogus. Checkfree did have a redirect of their site that did occur just like the email indicates. I work for a company that does the processing for Credit Unions and we use CheckFree for the online bill pay service we supply to them. The verbiage of the letter is similar to what CheckFree supplied to us for sample notifications to our credit union cardholders. I am researching to confirm the validity of the number, though. So regardless of what computerguy says the checkfree compromise is not bogus.

rickv's post above is bogus. This is a scam. Don't call the numbers.

I did not receive a call from this number, but the number was provided in the text of the email "andy" posted above. I have this bill paying service and also received this email about the potential problem. I was a little leery about the validity of the email source, as I had never received any emails from them prior to this (other than standard bill paying emails that I have purposefully set up to receive from them).

As stated in the email text, this is only a possible issue PROVIDED you went on line to pay a bill on December 2nd. If you have the service and did not make a manual payment that day, no problem.. disregard it.

I called this toll free number just to be sure and nothing seemed fishy when I talked to the agent/rep who picked up. They requested no personal info from me. Seems legit, as Ricky's post two above mine confirms.

Is there any way to tell exactly when you may have been logged in their system to make your payment?  I paid my Sams Club account and just can't remember when (day  or time)I did it - but I received the e-mail. If the payment was actually deducted from my account does that mean that I was not redirected to the malicious server?  I have virus scanning software on my computer and ran a full system scan for safety.  I just don't know how concerend I should be.

Sam's Club also uses CheckFree and their site was compromised. I logged on to my account & the email message is legitimate even though its delivery was suspicious. I also confirmed that since I was not on their site during the specified time period my system was not involved, nonetheless I am doing full virus & rootkit, etc. scans. The Washington Post article on this verifies the hacker attack on MyCheckFree.

http://voices.washingtonpost.com/securityfix/ ... the_checkf.html

Well, if they have caller ID and your phone was not set to a private number, they now have your phone number as well as your email account and home address. Be expecting some annoying phone calls.

This is a scam. Apparently it was previously done with checkfree (if you look up the first 877 number in the email below, you will see those posts, now it is being done with mybillpay, (neither of which I use).

December 10, 2008

My Name was here
My address was here

Dear my name

We take great care to keep your personal information secure. As part of these ongoing efforts, we are notifying you that the computer you use for online bill payment may have been exposed to software that puts the security of your computer's contents at risk. This letter will help you determine if your computer is actually infected and advise you how to fix the problem and protect yourself against future risk.

The malicious software affects some but not all customers who accessed online bill payment on Tuesday, December 2, 2008. For a limited period of time, some customers were redirected from the authentic bill payment service to another site that may have installed malicious software. Your computer may be infected if all of the following are true:

   * You attempted to access online bill payment between 12:30 a.m. and 10:10 a.m. Eastern time (GMT -5) on Tuesday, December 2, 2008, and
   * You were using a computer with the Windows operating system, and
   * You reached a blank screen rather than the usual bill payment screen when you attempted to navigate to online bill payment, and
   * After reaching the blank screen, your computer's virus protection program did not tell you via pop-up or other messaging that malicious software was detected and quarantined.

If all four of the conditions above are true, your computer may be infected. We have partnered with McAfee®, the world's largest dedicated security technology company, to provide you with a complimentary copy of its VirusScan® Plus software which, when installed, will detect, block and remove any malicious software from your computer hard drive. Please contact us at 877-800-4864 for further instructions or 800-564-9184 (Option 1) for further instructions. We will also offer you both advice and free services that can help you mitigate any risk you may face as a result of this incident or other everyday exposures you may encounter.

We will never ask for your password via email or via phone.  If you ever receive an email requesting your password, do not respond and delete the email immediately.

We value your business and your trust, and we apologize for any inconvenience this incident has caused.

Thank you,

BillPay Customer Service

Just says thank you for calling customer service