Cyber Risks · Krebs on Security

NoMore Rack.com Probes Possible Card Breach

Summary: Online retailer NoMoreRack.com hired a computer forensics team for the second time since August 2013 after Discover notified it of a potential breach of customer card data, with Discover reporting fraud tied to cards used at the store between Nov. 1, 2013 and Jan. 15, 2014. Trustwave's first audit, completed in late October 2013, found no clear-cut evidence of compromise, and the company engaged Trustwave again for a second forensics audit and a full PCI compliance Level 1 audit, even though its 2013 card volume placed it in the Tier-2 range.

What's compelling: Discover flagged the same merchant twice in seven months, and the first forensics audit still found no conclusive evidence of a leak - so a clean report did not stop the fraud reports from continuing.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related