Cyber Risks · Krebs on Security

Breach at Winery Card Processor Missing Link

Summary: Missing Link Networks Inc., a credit card processor and point-of-sale vendor serving Northern California wineries, disclosed that an unknown intruder breached its eCellar Systems consumer-direct sales platform during April 1-30, 2015, exposing customer names, credit/debit card numbers, billing addresses, and dates of birth. CEO Paul Thienes said the company began notifying winery customers on May 27, 2015, has identified and secured the breach method, and is converting to a token system so card numbers are no longer stored on the platform.

What's compelling: The stolen data covers a full month of transactions across multiple wineries, and the company's own notice warns that individual consumers may receive breach notices from more than one winery - meaning a single compromised processor spread the exposure across its entire client base.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related