Heartland Payment Systems compromise...

[DJ Jackalope]

I was wondering if anyone has been following the Heartland Payment Systems compromise thing that's been going on for...well around a year.

Basic premise: a ton of credit cards get processed through Heartland and somewhere through a bit of negligence, a piece of malware magically found its way into the Heartland computer and started copying all of the credit cards that went though it. For over a year. Someone just found out about this a couple weeks ago.

Last count was that it's over 100 Million credit cards and is the biggest credit card compromise in history. Nifty, eh? It's mostly east coast based, so I just wanted to throw this your way since I haven't seen anything on here about it yet.

Computer World's article on it.

[FarmerPete]

Re: Heartland Payment Systems compromise...

I haven't seen anything since they broke the news (conveniently RIGHT during the inauguration), but at that time they said they processed 100 million transactions a month. Now, I'm sure there are a lot of repeat cards in that 100 million a month, but that's a lot of cards. Apparently they only got the information stored on the magnetic strip (number, expiration, and name).

I was wondering if anyone has been following the Heartland Payment Systems compromise thing that's been going on for...well around a year.

Basic premise: a ton of credit cards get processed through Heartland and somewhere through a bit of negligence, a piece of malware magically found its way into the Heartland computer and started copying all of the credit cards that went though it. For over a year. Someone just found out about this a couple weeks ago.

Last count was that it's over 100 Million credit cards and is the biggest credit card compromise in history. Nifty, eh? It's mostly east coast based, so I just wanted to throw this your way since I haven't seen anything on here about it yet.

Computer World's article on it.

[shrdlu]

Re: Heartland Payment Systems compromise...

I was wondering if anyone has been following the Heartland Payment Systems compromise thing that's been going on for...well around a year...

For those few people not on the InfoSec news and Dataloss mailing lists, I'd say the most interesting bit is that there is now an investigation into possible insider stock trading.

http://www.infosecnews.org/ and http://www.datalossdb.org/

Seriously, you're missing all the "fun" if you're not reading both of those. There's been quite a bit of information, including the beginnings of a class action suit, the insider trading, and dataloss has even provided a spreadsheet for known bankcards affected so far.

[xor]

Re: Heartland Payment Systems compromise...

******************
Source Sans New Bites:

In a separate but related story, the sniffer that
was used to steal the payment card account information was found on an
unallocated portion of a server disk. It was well enough hidden that
it eluded two teams of forensic investigators before being found through
a string of temp files.

*******************

This whole deal has far reaching implications.

xor