Forest Global Training Partners

Cyber Risks · Krebs on Security

Breach Blind Spot Puts Retailers on Defensive

Summary: Sears said it has found no information indicating it was breached, after rumors and a Bloomberg report that the U.S. Secret Service was investigating a possible breach at the retailer. Verizon Enterprise Solutions' Bryan Sartin attributed such false alarms to a bank anti-fraud process called common point of purchase analysis, which he said can identify a breached entity more than nine times out of ten but produces false positives in the 60 to 90 days after a large breach like Target's, which compromised card data on 40-some million transactions.

What you should know: Sartin's account means a retailer can be named as a breach victim and pushed into an outside investigation by card-brand pressure largely because small banks misread overlapping shopping patterns after a Target-scale theft, so the accusation itself carries cost before any evidence exists.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related