Don't Put The Words 'Rugby' 'World' And 'Cup'... >>
<< Rethinking Peer Review As The World Peer...
 tdicon 

(Mis)Uses of Technology

by Mike Masnick

Thu, Aug 12th 2010 4:31pm




Filed Under:
breach, credit cards, security

Companies:
heartland payment systems


Company That Had The Largest Ever Credit Card Data Breach... Apparently Breached Again [Update]

from the hits-you-in-the-heartland dept

Remember Heartland Payment Systems? It's the giant credit card clearinghouse that was involved in the largest ever security breach in terms of the number of credit card numbers exposed. They were successfully targeted by the same guys who had also set the previous record for largest credit card data breach, so you could question whether the issue was just a sophisticated group of hackers or poor security at Heartland (or, possibly, a combination of both). Either way, it looks like Heartland may still have some issues. Carlo sends over the news that a new security breach has been discovered at a restaurant in Austin, Texas that appears to involve someone hacking into the network between the restaurant and Heartland. It's not yet clear if this goes beyond that one restaurant, but this can't look good for Heartland.

Update: Heartland got in touch to let us know that this appears to be an issue outside of Heartland's system, and that Heartland is not the target of the investigation into the breach. Heartland's press release is basically pointing out that the weakness was with the restaurant's credit card security, not its own.

11 Comments | Leave a Comment

If you liked this post, you may also be interested in...

Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    Wolfy, Aug 12th, 2010 @ 5:39pm

    Another argument in favor of cash.

     

    [ reply to this | link to this | view in thread ]

  2.  
    icon
    CJ (profile), Aug 12th, 2010 @ 7:18pm

    Lets stick around, and see what kind, and how bad, their punishment is for this. Then we'll know whom to look at to blame the next breech on. I have not seen one as of yet that really got punished properly.

     

    [ reply to this | link to this | view in thread ]

  3.  
    identicon
    Anonymous Coward, Aug 12th, 2010 @ 8:22pm

    Remember Heartland Payment Systems?

    More importantly, Remember Carlo?

    Is this the same Carlo you fired about a year ago? How's he been? Is he still in Vegas?

     

    [ reply to this | link to this | view in thread ]

  4.  
    icon
    Willbfree1 (profile), Aug 13th, 2010 @ 6:22am

    Security Breach Again!

    This so sad for this company and customers. This is a lose lose situation. When this company fix the problem it will still lose customers and the former customers will never trust any other company fully again.

     

    [ reply to this | link to this | view in thread ]

  5.  
    identicon
    Chris, Aug 13th, 2010 @ 7:23am

    PCI

    So how's that PCI compliance requirement working out for everyone?

     

    [ reply to this | link to this | view in thread ]

  6.  
    identicon
    Ed C, Aug 13th, 2010 @ 12:12pm

    Re: Security Breach Again!

    What I think is unreasonable is that with all of the money Heartland gets from handling financial transactions and information, that it can't even be bothered to insure their security. The business is founded on the trust that they can be handled security, and that trust has been broken. Any lose of business that results from these breaches is the lest they deserve.

     

    [ reply to this | link to this | view in thread ]

  7.  
    identicon
    Anonymous Coward, Aug 14th, 2010 @ 5:36pm

    Remember Heartland Payment Systems? It's the giant credit card clearinghouse that was involved in the largest ever security breach in terms of the number of credit card numbers exposed.


    Largest ever? I think you mean largest yet. :P

     

    [ reply to this | link to this | view in thread ]

  8.  
    identicon
    Anonymous Coward, Aug 16th, 2010 @ 7:37am

    Somebody else's fault?

    Details are scarce in these reports, but it looks as if the numbers were going through the network in the clear. At what point in the chain did Heartland first have the ability to encrypt them with Heartland's public key?

    If they were intercepted before this point, then I think Heartland was not to blame...

     

    [ reply to this | link to this | view in thread ]

  9.  
    identicon

    double trouble

    oh! that makes two, 3 strikes and they're out

     

    [ reply to this | link to this | view in thread ]

  10.  
    identicon

    small business.

    I say that we just make it a 2 strike rule and get rid of these guys. Fool me once, shame on you, fool me twice, shame on me.

     

    [ reply to this | link to this | view in thread ]

  11.  
    icon
    lrobbo (profile), Jun 12th, 2012 @ 11:43am

    Fool me twice,er, won't, er won't get fooled again . . .

     

    [ reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Don't Put The Words 'Rugby' 'World' And 'Cup'... >>
<< Rethinking Peer Review As The World Peer...
 tdicon 
Follow Techdirt
Flattr rss rss
A word from our Sponsors...
Sponsored Resource
Essential Reading
Techdirt Reading List
Techdirt Insider Chat

A word from our Sponsors...
Recent Stories

Wednesday

9:25am: New Orleans Cops Caught Filling Their Pockets With Red Light Camera Cash (2)
8:07am: LeaseWeb Deletes Megaupload's Servers Without Warning, Destroying Key Evidence (46)
7:12am: How Overclassification Makes Secrets Less Likely To Remain Secret (16)
5:58am: Sweden Makes It Illegal To Take Photos In 'Private Environments' Without Permission (22)
3:58am: Hollywood Studios Keep Saying Its Employees Must Get Paid, And Now May Be Forced To Pay Its Interns (84)
1:56am: Warning Letters Under UK's Three Strikes Plan Unlikely To Be Sent Out Before 2016 -- If Ever (15)

Tuesday

11:01pm: Public Outcry In Taiwan Kills Their Version Of SOPA (13)
8:02pm: WIPO: Informal Economy Innovates In The Absence Of Intellectual Monopolies (16)
5:00pm: DailyDirt: Augmented Vision (3)
3:50pm: States Attorneys General Want Special Exception To Blame Sites For Actions Of Users (68)
More arrow
A word from our Sponsors...

Close

Email This