The Roman Catholic Archdiocese of Philadelphia said in a letter to donors this week that it had learned that some donations to two annual fund-raising appeals had been "manually mishandled, misappropriated, or not processed," allegedly by a TD Bank employee who has been arrested.
"Currently, we are working to analyze the level of financial exposure in order to determine restitution for these campaigns," the letter on behalf of Archbishop Charles J. Chaput states. "It is important to note that this issue could not have been prevented by the archdiocese.
The letter, dated Aug. 24 and signed by Msgr. Daniel Kutys, says the breach could affect both those who mailed donations or put money in baskets passed from pew to pew during Masses. Online donations are not believed to be affected.
The donations by parishioners were made to the annual Catholic Charities and Seminary appeals. The money or checks were placed in separate lockboxes at a TD Bank office.
Donors' personal information does not appear to have been compromised, Kutys' letter says. The letter says it appears that an employee with access to donations kept in the lockboxes was involved. The unidentified employee is no longer with the bank and faces possible charges, according to the letter.
The situation "is being taken seriously and the investigation into this matter is ongoing" by the archdiocese, Kutys says in the letter. How many were sent is unclear.
Ken Gavin, a spokesman for the archdiocese, said Sunday the breach occurred even as the charities followed "best practices for large fund-raising initiatives of this nature."
Judith Rusk Schmidt, a TD Bank vice president for corporate media relations, sent the following statement by e-mail Sunday:
"At TD Bank, we consider the safety and security of our customers our top priority. After an internal investigation, we took decisive action for our customer, and determined that, to the best of our knowledge, all personal information stayed within the bank and was not compromised. We continue to work closely with the archdiocese to address any remaining concerns."
She did not release the employee's name.
Church officials say that it takes about three weeks for a donation to be processed. Donors who received a thank you letter or some acknowledgement of their contributions were not likely affected, the letter says. Those who did not receive an acknowledgement within the time may have been victimized, the archdiocese said.
Officials say that anyone who has questions or believes a donation might have been stolen should call 866-812-8700, a hotline set up by the archdiocese.
A copy of the letter is below: