Reason codes / VMSS codes / VMSS 33: Account Data Compromise
VMSS code 33: Account Data Compromise
Official definition and what it means for your removal request.
Definition
The Merchant or Third Party Agent suffered a data breach, directly or indirectly resulting in an unauthorized disclosure of payment account and/or transaction information.
What this means in plain language
A breach exposed payment or transaction information—hack, leak, or incident that let card data out without authorization. It is Visa’s data-breach style code for merchants.
What you can do
If you were listed under VMSS code 33, you can submit a formal removal request to the PSP or acquirer that added you. They will review your case and, if satisfied, can request removal from the VMSS list. We help you draft and submit that request. See VMSS removal and all MATCH and VMSS reason codes.
Removal guides by PSP
The approach to removal depends on which PSP or acquirer listed you. Select yours to see what their risk team evaluates:
View full guide by processor →