Cyber Risks · Krebs on Security

‘Spam Nation’ Publisher Discloses Card Breach

Summary: Sourcebooks, the publisher of Brian Krebs's book Spam Nation, disclosed to the California Attorney General that a breach of its shopping cart software between April 16 and June 19, 2014 may have exposed customer credit card numbers, expiration dates, cardholder names, CVV2 codes, and in some cases account passwords. Founder Dominique Raccah said the breach affected approximately 5,100 people who ordered from the company's website, and the company is having a third-party forensic audit done.

Why it matters: The exposed data included CVV2 codes, which PCI-DSS forbids storing, and roughly 5,100 customers of a single small merchant now carry that exposure - a reminder that card data handled in-house by smaller online stores is where fraudsters concentrate once chip cards push them off the checkout counter.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related