BreachExchange mailing list archives

Visa Issues Cash-Register Flaw Warning


From: lyger <lyger () attrition org>
Date: Fri, 17 Mar 2006 16:35:58 -0500 (EST)


(interesting tie-in to the PIN issue - lyger)

http://www.eweek.com/article2/0,1759,1939301,00.asp

The U.S. arm of credit and debit card giant Visa International has issued an alert for flaws in cash-register software made by Fujitsu Transaction Solutions that could put sensitive cardholder information at risk.

According to a report in The Wall Street Journal, the bug can cause the inadvertent storage of customer data?including secret PINs?within the point-of-sale software installed in retail locations.

The report said Visa USA sent the warning to "merchant acquirers" that process card transactions for some of the biggest names in retail and urged users to apply a software upgrade from Fujitsu to fix the flaw.

Officials from Visa USA and Fujitsu could not be reached for comment at press time but, according to the newspaper, the confidential alert was sent several days ago to raise awareness about the bug.

[...]

http://www.eweek.com/article2/0,1759,1939301,00.asp
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/


Current thread: