Cyber Risks · Krebs on Security

Sources: Credit Card Breach at California DMV

Summary: MasterCard alerted California banks this week to a "card-not-present" breach affecting cards used online at the California DMV, with potentially compromised transactions dating from Aug. 2, 2013 to Jan. 31, 2014 and stolen data including card number, expiration date, and three-digit security code. One California bank said the alert listed more than 1,000 of its cards, about 2 percent of its card base, and the DMV said it found no evidence of a direct breach of its own systems while pointing to its external card processor, which a state document suggests is Elavon.

Bottom line: Californians conducted more than 11.9 million online DMV transactions in 2012, and the compromised data includes the three-digit security code, so the exposure window runs across six months of payments rather than a single incident.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related