TJX and Issuer Banks settlement
Monday, December 3rd, 2007 Posted in Banking, Card Brands, Credit Card Fraud, Merchant | 2 Comments »Many of you have already heard about the TJX settlement with the Issuing Banks (not-Visa). Although the case may involve Visa, it is only as an intermediary. It is the Issuing banks that had to cover fraudulent charges that are ...
5 Steps to Your Next (Secure) POS
Saturday, November 24th, 2007 Posted in Credit Card Fraud, Merchant, Payment Applications, Point of Sale, pa-dss | 5 Comments »So you might have read the recent Visa (USA) timeline for migrating to more secure point-of-sale (POS) technology. Or maybe you are looking at your aging systems and wanting to take the plunge and upgrade to a sexier, ...
Wireless and other Emerging Compromises
Sunday, November 18th, 2007 Posted in Credit Card Fraud, Wireless | No Comments »The Associated Press covered the AirDefense study showing that many retailers are susceptible to data compromise. I have been saying this for many years now that the greatest risks to retail merchants are: insecure POS systems, remote management, and insecure ...
TJX exposure updated in latest court filing to 94 million
Thursday, October 25th, 2007 Posted in Credit Card Fraud, Merchant | 3 Comments »I received several calls yesterday from media outlets looking for more information on the story, but I am unable to discuss this point directly. The Boston Globe is running with a story about the updated TJX timeline and ...
Pay at the Pump - how a ZIP code can save you from fraud
Friday, October 19th, 2007 Posted in Credit Card Fraud, Merchant | 16 Comments »Have you noticed that more and more gas/petrol stations have been asking for your ZIP/postal code before permitting you to pay-at-the-pump? The reason for this is usually assumed to reduce the number of people who steal credit cards and use ...
TJX criminals are rounded up
Saturday, September 15th, 2007 Posted in Credit Card Fraud | No Comments »A friend of mine, Gary Warner, has all the details on arrests made from the TJX credit card hack. This was the largest credit card compromise in history, with over 45m cards reportedly exposed. We also recommend you ...
CardersMarket takedown, details, and confessions
Saturday, September 15th, 2007 Posted in Credit Card Fraud | 12 Comments »Ambersail pointed us to the story that CardersMarket has been castrated with the arrest of its top admin, Max Butler (aka Max Vision, Iceman, Digits, Aphex). If you did not see this coming I don't know what to tell you. For ...
Boss, I think Someone Stole Our Customer Data
Thursday, September 6th, 2007 Posted in Compliance, Credit Card Fraud, Merchant, PCI DSS | No Comments »One of my favorite magazines to read, the Harvard Business Review, has posted a case study written by Eric McNulty. It is titled "Boss, I think Someone Stole Our Customer Data" and walks through what happens in just such ...
TJX reports a loss due to cardholder data breach
Friday, August 17th, 2007 Posted in Credit Card Fraud, Merchant | 5 Comments »TJX is back in the news and reporting over a hundred million dollar loss due to the massive cardholder data breach. People continually ask why they got off so easy, but as the losses continue to pile up I'm sure the ...
Stolen card or not?
Wednesday, August 8th, 2007 Posted in Credit Card Fraud | 7 Comments »Dennis told me about this site where you could enter your credit card number or social security number and they will tell you if it was compromised or not. My immediate reaction was that it was a joke, but then looking ...