Global Breach: Did It Start in 2011?

[InfoSec News <alerts () infosecnews org>]

http://www.bankinfosecurity.com/global-breach-did-start-in-2011-a-4732

By Tracy Kitten
Bank Info Security
May 2, 2012

Evidence is mounting that Global Payments Inc. may have been breached 
months earlier than initially reported.

One affected card issuer told BankInfoSecurity that Visa issued an 
updated alert about the breach on April 26, noting that the window for 
compromise could date back to June 7, 2011. Another card issuer says the 
window of compromise, as provided by Visa, dates back to June 11. Both 
issuers asked to remain anonymous.

Previously, Visa's alerts indicated the breach occurred sometime between 
Jan. 21, 2012, and Feb. 25, 2012. But Global says it notified the 
affected card brands of the breach in early March, as soon as internal 
systems detected a compromise.

"The additional alerts did increase our initial compromised total by 
about 50 percent," one card issuer says.

[...]


_______________________________________________
LayerOne Security Conference
May 26-27, Clarion Hotel, Anaheim, CA
http://www.layerone.org