Forest Global Training Partners

Cyber Risks · Krebs on Security

Google Points to Another POS Vendor Breach

Summary: Google's "This site may be hacked" warning on the Select Restaurants Inc. website helped identify the source of a credit card breach affecting diners at the company's restaurants nationwide, the second such case in nine months after a similar warning on Datapoint POS during the CiCi's Pizza breach. 24x7 Hospitality Technology, the Geneva, Ill. POS vendor handling Select's card transactions, sent a Feb. 14 letter warning that attackers gained access through a remote access application, executed the PoSeidon malware, and exposed card data at all of Select's listed restaurants from late October 2016 to mid-January 2017.

Bottom line: The breach ran roughly three months before anyone connected the fraud to a common POS vendor, and only because multiple banks compared notes on where affected cardholders had dined. Small merchants buying payment services through integrators and resellers leave no easy trail from breached restaurant back to issuing bank, which is why organized crime keeps picking off Tier 3 and Tier 4 POS providers with PoSeidon.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related