Harbortouch is Latest POS Vendor Breach
Summary: Harbortouch disclosed that malware installed on point-of-sale systems at a "small number" of its restaurant and bar merchant customers allowed thieves to siphon card data, and the company said it removed the malware within hours of detection and engaged Mandiant to investigate. A top 10 U.S. card-issuing bank told KrebsOnSecurity the breach actually extends to at least 4,200 Harbortouch merchant locations, a figure Harbortouch's marketing director Nate Hirshberg called "simply a false statement."
Bottom line: The gap between the vendor's "small percentage" and a major issuer's count of 4,200 stores is the number a security leader should sit with, because banks were already blocking signature debit at big-box stores over fraud they could not trace to a single merchant.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026