SoylentNews is people
SoylentNews
from the data-breaches,-faster-than-the-speed-of-business dept.
Ars Technica reports:
Dozens of UPS stores across 24 states, including California, Georgia, New York, and Nebraska, have been hit by malware designed to suck up credit card details. The UPS Store, Inc., is a subsidiary of UPS, but each store is independently owned and operated as a licensed franchisee.
In an announcement posted Wednesday to its website, UPS said that 51 locations, or around one percent of its 4,470 franchised stores across the country, were found to have been penetrated by a “broad-based malware intrusion.” The company recorded approximately 105,000 transactions at those locations, but does not know the precise number of cardholders affected.
UPS did not say precisely how such data was taken, but given the recent breaches at hundreds of supermarkets nationwide, point-of-sale hacks at Target, and other major retailers, such systems would be a likely attack vector. Earlier this month, a Wisconsin-based security firm also reported that 1.2 billion usernames and passwords had been captured by a Russian criminal group.
(Score: 2) by kaszz on Friday August 22 2014, @12:13AM
Is the common factor that Point-of-sales terminals are running Microsoft software which is by definition very easily infected? If so perhaps it's time to change that..
And then it's this reliance on unencrypted and unauthenticated CC numbers instead of pin & chip. Completely crazy.
Finally as others has said. Make it isolated with VLAN. Otoh, the real problem is usually the management! the fish rots from the head down..
(Score: 0) by Anonymous Coward on Saturday August 23 2014, @02:53PM
This man speaketh the thruth!