Forest Global Training Partners

Cyber Risks · Krebs on Security

Banks: Credit Card Breach at CiCi’s Pizza

Summary: Fraud investigators at more than a half-dozen U.S. financial institutions reported a pattern of card fraud on accounts all used in recent months at CiCi's Pizza locations, a chain of more than 500 stores in 35 states based in Coppell, Texas. A tip relayed to KrebsOnSecurity said the U.S. Secret Service linked the fraud to a breach or security weakness at Datapoint, CiCi's point-of-sale provider, and Datapoint's Stephen P. Warne responded that the investigated breaches involved multiple POS vendors in one franchise, including Harbortouch and Granbury Restaurant Systems, and were traced to social engineering and remote-access tools such as TeamViewer and Screen Connect.

Key Takeaway: The reported mechanism was attackers phoning stores while posing as technical support for their point-of-sale vendor and being let in, which means the control that failed was a person at the register deciding who to trust on a call, not a piece of software.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related