Global Payments: Rumor and Innuendo
Summary: Global Payments CEO Paul Garcia held a conference call on the breach that exposed fewer than 1.5 million card accounts, declining to detail how it happened or comment on reports the intrusion dated to at least January 2012, and saying only that the company self-discovered it in early March. Krebs, who was not called on during the hour-long call, reported that an anonymous hacker claimed the company's network was under full criminal control from early 2011 until March 26, 2012, gathering data on 24 million unique transactions, and backed the claim with a Global Payments disaster recovery document.
What's compelling: The company's public count is fewer than 1.5 million accounts; the hacker's claim is 24 million unique transactions collected over 13 months - a gap a security leader should sit with before accepting any breach disclosure at face value.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026