Forest Global Training Partners

Cyber Risks · Krebs on Security

Payments Giant Verifone Investigating Breach

Summary: Verifone, the largest maker of credit card terminals in the United States, said its information security team saw evidence in January 2017 of a limited intrusion into its corporate network, and on Jan. 23, 2017 its CIO sent staff and contractors an urgent memo giving them 24 hours to change all company passwords and barring them from installing software at will. A source told KrebsOnSecurity that the alert followed a notification from Visa and Mastercard days earlier, that a customer support unit in Clearwater, Fla. serving gas and petrol stations was affected, and that a Russian hacking group appeared to have been inside the network since mid-2016; Verifone later said the attempt was limited to controllers at approximately two dozen gas stations.

What's compelling: If the source's timeline holds, a skilled adversary had more than six months inside the network of the company whose terminals process card payments across U.S. retailers, taxis and fuel stations - and the intrusion surfaced through a card-brand notification rather than internal detection.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related