BreachExchange mailing list archives

Re: CardSystems Settles FTC Charges


From: Chris Walsh <cwalsh () cwalsh org>
Date: Thu, 23 Feb 2006 21:30:52 -0600

Interesting that Pay By Touch (which now owns Cardsystems) says  
(http://www.paybytouchpaymentsolutions.com/about.html) that they are  
"VISA Cardholder Information Security Program (CISP) Compliant", but  
VISA's list of CISP compliant service providers (http://usa.visa.com/ 
download/business/accepting_visa/ops_risk_management/ 
cisp_List_of_CISP_Compliant_Service_Providers.pdf), dated 2/1/2006,  
includes neither CardSystems nor Pay By Touch.

The PCI Data Security  Standard is one MasterCard and VISA require  
adherence to, and it mandates on-site assessments for processors as  
large as Cardsystems.  I specifically remember Amex and Visa dropping  
Cardsystems, but I do not have a similar memory for MasterCard.   
Unfortunately, I cannot find a list of MasterCard's approved  
processors, analogous to the VISA list above.


On Feb 23, 2006, at 8:17 PM, lyger wrote:


In the case of CardSystems and their new companies, it might be  
because
VISA is no longer doing business with them?

http://attrition.org/errata/dataloss/cardsystems04.html

_______________________________________________
Dataloss mailing list
Dataloss () attrition org
https://attrition.org/mailman/listinfo/dataloss


Current thread: