First Data Merchants Attain Record PCI Compliance in Just Six Months. Over 100,000 Businesses Secured with SecurityMetrics PCI DSS Compliance Service.

HAGERSTOWN, MD & SALT LAKE CITY — (APRIL 2, 2009)  SecurityMetrics, the world leader in PCI security, today announced that over 100,000 US merchants in First Data’s Merchant Services portfolio enrolled to achieve compliance in SecurityMetrics Payment Card Industry (PCI) Data Security Standard (DSS) Site Certification services.

“SecurityMetrics provides our Level 4 merchants with a simple way to secure credit card payment data, and ultimately, help them better serve their customers’ payment needs and enhance data privacy,” said Carl Mazzola, senior vice president, First Data.

First Data selected SecurityMetrics to facilitate customer compliance with PCI DSS in September 2008. Through the relationship, SecurityMetrics provides First Data’s small to mid-sized merchants with access to the most advanced security tools and PCI expertise available.

As a leading merchant electronic payment services provider, First Data is helping the credit card
industry by providing an inexpensive means for First Data merchants to protect their credit card data. This helps to create consumer confidence at a time when large credit card breaches are happening with more frequency. Other processors and banks need to help their merchants protect their data so our credit card transaction information will remain safe, said Brad Caldwell, SecurityMetrics CEO.

Under the program, SecurityMetrics provides First Data merchants with access to a comprehensive PCI compliance program that includes unlimited live technical support 24 x 7, unlimited manual scanning, weekly reminders and consulting services.

To learn more about how to enroll in SecurityMetrics PCI Compliance Solutions through First Data, contact a representative at 801.705.5665 in North America or 0207.993.8030 in Europe.

About SecurityMetrics

SecurityMetrics, Inc. is a leading provider of Payment Card Industry (PCI) Data Security Standard (DSS) security solutions. SecurityMetrics is certified to perform PCI Scans (ASV), PCI audits (QSA), Payment Application Best Practices audits (QPASP), MasterCard Point of Sale Terminal Security Program audits, penetration tests and forensic analysis. SecurityMetrics also offers a security appliance that includes vulnerability assessment, intrusion detection and intrusion prevention capabilities. SecurityMetrics is a privately held corporation headquartered in Orem, Utah. For more information contact SecurityMetrics at (801) 724-9600 or visit www.securitymetrics.com.

About First Data

First Data powers the global economy by making it easy, fast and secure for people and businesses to buy goods and services using virtually any form of electronic payment.  Whether the choice of payment is a gift card, a credit or debit card or a check, First Data securely processes the transaction and harnesses the power of the data to deliver intelligence and insight for millions of merchant locations and thousands of card issuers in 37 countries. For more information, visit www.firstdata.com.

related article: First Data PCI DSS Compliance Fee for Tier 4 merchants

This summer, First Data conducted a consumer loyalty study focused on rewards programs for the financial institution market sector.  More than 1,000 U.S. consumers participated in the study. Key findings include:

• Credit card rewards programs are the most popular, versus debit card or “other banking” rewards programs such as those tied to savings accounts



• Consumers are frustrated – especially when they cannot use the rewards being offered or have no choice when selecting rewards



• Consumers have strong opinions about what constitutes a “unique rewards program”



• The  most important program features are the ability to select rewards and ease of use

More detail is available on these findings.  Credit card rewards program study goes into further detail on these findings and provides additional statistics that offer important perspectives for financial institutions to consider.

Agreement Gives First Data Merchants a Cost Effective Way to Access
Industry-Leading PCI Services

SALT LAKE CITY (SEPTEMBER 16, 2008) – SecurityMetrics today announced that electronic
commerce and payments leader First Data has selected SecurityMetrics to provide PCI services
for their small to mid-sized merchants. By providing the latest security technology coupled with
customer support services for PCI issues, SecurityMetrics helps merchants protect their
organizations from security breaches and simplifies the enrollment process.  SecurityMetrics’ PCI
services result in a reduction of acquirer and merchant liability by limiting risk, reducing fraud, and
increasing consumer credit card confidence in payments.

“We offer First Data’s customers a manner to simplify PCI compliance in one of the most
convenient, secure and cost-effective ways possible,” said Brad Caldwell, SecurityMetrics’ CEO.
“Our approach is to arm the merchant with the knowledge, technology and customer support they
need to assure their customer data is protected – plus the ability to prove it.”

Under the agreement, the companies are working together to provide a complete PCI compliance
program to help small to mid-size merchants gain access to some of the best PCI know-how
available. SecurityMetrics provides a one stop shop for all merchants with unlimited 24 x 7 live
technical support, unlimited manual scanning, weekly resolution reminders, and consulting
services before system upgrades or changes are implemented.

“PCI Compliance may be required in order to take credit cards for purchases, but it is also a good
business practice to protect customer information. This program offers small to mid-size
merchants a new way to streamline PCI compliance so that they can focus more time on serving
customers and expanding their businesses,” said Carl Mazzola, senior vice president, First Data.

To learn more about SecurityMetrics’ PCI Compliance Solutions, contact a representative at
801.705.5665 in North America or 0207.993.8030 in Europe. For more information, see

http://www.securitymetrics.com.

About SecurityMetrics
SecurityMetrics, Inc. is a leading provider of Payment Card Industry (PCI) Data Security Standard
(DSS) security solutions. SecurityMetrics is certified to perform PCI Scans (ASV), PCI audits
(QSA), Payment Application Best Practices audits (QPASP), MasterCard Point of Sale Terminal
Security Program audits, penetration tests and forensic analysis. SecurityMetrics also offers a
security appliance that includes vulnerability assessment, intrusion detection and intrusion
prevention capabilities. SecurityMetrics is a privately held corporation headquartered in Orem,
Utah. For more information contact SecurityMetrics at (801) 724-9600 or visit
www.securitymetrics.com.

About First Data
First Data is a global technology leader in information commerce. The company processes
transaction data of all kinds, harnesses the power of that data and delivers innovations in secure
infrastructure, intelligence and insight for its customers. With operations in 37 countries, First
Data serves more than 5.4 million merchant locations and more than 2,000 card issuers and their
customers. It powers the global economy by making it easy, fast and secure for people and
businesses around the world to buy goods and services using virtually any form of payment. The
company’s portfolio of services and solutions includes merchant transaction processing services;
credit, debit, private-label, gift, payroll and other prepaid card offerings; fraud protection and
authentication solutions; electronic check acceptance services through TeleCheck; as well as
Internet commerce and mobile payment solutions. The company’s STAR Network offers PIN-
secured debit acceptance at 2.1 million ATM and retail locations.  Through First Data’s centers of
excellence, such as security, analytics, customer loyalty and mobile payments, it offers data-
driven commerce solutions for customers around the globe. For more information, visit
www.firstdata.com.

NEW YORK – May 27, 2008 – JPMorgan Chase [NYSE: JPM] and First Data announced today they have agreed to end their joint venture, Chase Paymentech Solutions™, a global payments and merchant acquiring entity, by the end of 2008. In the interim, the two companies will continue to operate their joint venture (JV) and provide outstanding service to their customers.

In reviewing the Chase Paymentech joint venture, both JPMorgan Chase and First Data concluded that the payments and merchant-acquiring businesses were core to their strategies and each owner’s share of the venture should be operated independently by their respective companies.

After the transition, JPMorgan Chase and First Data will operate separate payment businesses. JPMorgan Chase will provide global payment solutions for allocated merchants by retaining 51 percent of the JV’s assets, including most of its employees and the JV’s Canadian and European operations. The bank will name its payments and merchant acquiring business Chase Paymentech and retain the JV’s Dallas headquarters.

First Data will continue to provide transaction processing and data commerce solutions for allocated merchants through its current technology platforms. First Data will assume management of the full-service ISO and Agent Bank unit of the JV and will integrate 49 percent of the JV’s assets and a portion of the JV employees into its existing merchant acquiring business.

“With emerging opportunities in the global payments business, it makes good sense to bring our stake in Chase Paymentech business fully in-house. Merchants are moving beyond traditional payment vehicles and we expect to be at the forefront of the industry, developing and investing in new forms of payments and related transactions that bring value to merchants”, said Gordon Smith, chief executive of JPMorgan Chase’s Card Services group. He added, “We appreciate our successful partnership with First Data Corp. and look forward to working with the company on other areas of joint interest in the future.”

“Throughout this transition, we are committed to ensuring that there is no disruption to our allocated merchant partners. First Data will continue to focus on our core business of providing data-driven solutions and insight for our customers while delivering market-leading services and technologies that advance global commerce,” said Brian Mooney, president of First Data’s Merchant Services group. “In addition, we remain committed to the bank alliance model and value the successful relationships we have with our financial institution partners. We look forward to working with JPMorgan Chase in other areas of business.”

Mike Duffy, president and CEO of Chase Paymentech, added, “During this transition, we will ensure that our customers continue to receive the high-quality support they expect from us. Our focus will continue to be on the delivery of the most secure and reliable global payments via our state-of-the-art, multi-channel proprietary payment platform.”

Chase Paymentech Solutions, LLC is a leading global payments firm and the world’s largest merchant acquirer – transacting all types of payments in 140 currencies. In 2007, the company processed approximately 19.7 billion payment transactions, with more than $719 billion in annual bank card and debit volume. Chase Paymentech’s customer base includes the most respected companies and brands in the world, including 70 percent of leading e-commerce businesses and more than 600,000 merchants in nearly one million locations worldwide. Learn more at www.chasepaymentech.com.

First Data is a global technology leader in information commerce. The company processes transaction data of all kinds, harnesses the power of that data and delivers innovations in secure infrastructure, intelligence and insight for its customers. With operations in 37 countries, First Data serves over 5.4 million merchant locations, 2,000 card issuers and their customers. It powers the global economy by making it easy, fast and secure for people and businesses around the world to buy goods and services using virtually any form of payment. The company’s portfolio of services and solutions includes merchant transaction processing services; credit, debit, private-label, gift, payroll and other prepaid card offerings; fraud protection and authentication solutions; electronic check acceptance services through TeleCheck; as well as Internet commerce and mobile payment solutions. The company’s STAR Network offers PIN-secured debit acceptance at 2.1 million ATM and retail locations. Through First Data’s centers of excellence, such as security, analytics, customer loyalty and mobile payments, it offers data-driven commerce solutions for customers around the globe. For more information, visit www.firstdata.com.

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $1.6 trillion and operations in more than 60 countries. The firm is a leader in investment banking, financial services for consumers, small business and commercial banking, financial transaction processing, asset management, and private equity. A component of the Dow Jones Industrial Average, JPMorgan Chase serves millions of consumers in the United States and many of the worlds most prominent corporate, institutional and government clients under its JPMorgan and Chase brands. JPMorgan Chase is committed to investing in education, economic opportunity, development and environmental programs that enable people and communities to thrive. Information about the firm is available at www.jpmorganchase.com.

NEW YORK – May 27, 2008 – JPMorgan Chase [NYSE: JPM] and First Data announced today they have agreed to end their joint venture, Chase Paymentech Solutions™, a global payments and merchant acquiring entity, by the end of 2008. In the interim, the two companies will continue to operate their joint venture (JV) and provide outstanding service to their customers.

In reviewing the Chase Paymentech joint venture, both JPMorgan Chase and First Data concluded that the payments and merchant-acquiring businesses were core to their strategies and each owner’s share of the venture should be operated independently by their respective companies.

After the transition, JPMorgan Chase and First Data will operate separate payment businesses. JPMorgan Chase will provide global payment solutions for allocated merchants by retaining 51 percent of the JV’s assets, including most of its employees and the JV’s Canadian and European operations. The bank will name its payments and merchant acquiring business Chase Paymentech and retain the JV’s Dallas headquarters.

First Data will continue to provide transaction processing and data commerce solutions for allocated merchants through its current technology platforms. First Data will assume management of the full-service ISO and Agent Bank unit of the JV and will integrate 49 percent of the JV’s assets and a portion of the JV employees into its existing merchant acquiring business.

“With emerging opportunities in the global payments business, it makes good sense to bring our stake in Chase Paymentech business fully in-house. Merchants are moving beyond traditional payment vehicles and we expect to be at the forefront of the industry, developing and investing in new forms of payments and related transactions that bring value to merchants”, said Gordon Smith, chief executive of JPMorgan Chase’s Card Services group. He added, “We appreciate our successful partnership with First Data Corp. and look forward to working with the company on other areas of joint interest in the future.”

“Throughout this transition, we are committed to ensuring that there is no disruption to our allocated merchant partners. First Data will continue to focus on our core business of providing data-driven solutions and insight for our customers while delivering market-leading services and technologies that advance global commerce,” said Brian Mooney, president of First Data’s Merchant Services group. “In addition, we remain committed to the bank alliance model and value the successful relationships we have with our financial institution partners. We look forward to working with JPMorgan Chase in other areas of business.”

Mike Duffy, president and CEO of Chase Paymentech, added, “During this transition, we will ensure that our customers continue to receive the high-quality support they expect from us. Our focus will continue to be on the delivery of the most secure and reliable global payments via our state-of-the-art, multi-channel proprietary payment platform.”

Chase Paymentech Solutions, LLC is a leading global payments firm and the world’s largest merchant acquirer – transacting all types of payments in 140 currencies. In 2007, the company processed approximately 19.7 billion payment transactions, with more than $719 billion in annual bank card and debit volume. Chase Paymentech’s customer base includes the most respected companies and brands in the world, including 70 percent of leading e-commerce businesses and more than 600,000 merchants in nearly one million locations worldwide. Learn more at www.chasepaymentech.com.

First Data is a global technology leader in information commerce. The company processes transaction data of all kinds, harnesses the power of that data and delivers innovations in secure infrastructure, intelligence and insight for its customers. With operations in 37 countries, First Data serves over 5.4 million merchant locations, 2,000 card issuers and their customers. It powers the global economy by making it easy, fast and secure for people and businesses around the world to buy goods and services using virtually any form of payment. The company’s portfolio of services and solutions includes merchant transaction processing services; credit, debit, private-label, gift, payroll and other prepaid card offerings; fraud protection and authentication solutions; electronic check acceptance services through TeleCheck; as well as Internet commerce and mobile payment solutions. The company’s STAR Network offers PIN-secured debit acceptance at 2.1 million ATM and retail locations. Through First Data’s centers of excellence, such as security, analytics, customer loyalty and mobile payments, it offers data-driven commerce solutions for customers around the globe. For more information, visit www.firstdata.com.

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $1.6 trillion and operations in more than 60 countries. The firm is a leader in investment banking, financial services for consumers, small business and commercial banking, financial transaction processing, asset management, and private equity. A component of the Dow Jones Industrial Average, JPMorgan Chase serves millions of consumers in the United States and many of the worlds most prominent corporate, institutional and government clients under its JPMorgan and Chase brands. JPMorgan Chase is committed to investing in education, economic opportunity, development and environmental programs that enable people and communities to thrive. Information about the firm is available at www.jpmorganchase.com.