BreachExchange mailing list archives

New Data Security Breach (Visa - 2009-088-IC & MasterCard 150-US-09) . More Information


From: lyger <lyger () attrition org>
Date: Sat, 21 Feb 2009 23:40:03 +0000 (UTC)


(tip courtesy databreaches.net via d2d)

http://cardnet.pcua.coop/Home/NewsFlash/tabid/248/Default.aspx

Earlier this week, Visa and MasterCard began issuing accounts involved in 
a merchant processor breach. The reported incident involves confirmed 
unauthorized access to a U.S. acquirer processor.s settlement system of 
stored transaction information that included Primary Account Numbers 
(PANs) and expiration dates. No magnetic stripe track data has been 
identified at risk in this alert. As the entity involved has not yet 
issued a press release, Visa and MasterCard are unable to release the name 
of the merchant processor.

It is important to note that this event is not related to the Heartland 
Payment Systems breach. While it has been confirmed that malicious 
software was placed on the processor.s platform, there is no forensic 
evidence that accounts were viewed or taken by the hackers. Since the 
final forensic report has not been provided there is no estimate available 
at this time of the number of accounts involved in this event. Law 
enforcement is activity engaged in an investigation into this situation.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

CREDANT Technologies, a leader in data security, offers advanced data encryption solutions.
Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently 
across your enterprise to ensure regulatory compliance.
http://www.credant.com/stopdataloss


Current thread: