Malware

Suspect identified in Heartland Payment Systems breach

Evan Schuman at Storefront Backtalk is reporting that the Secret Service has identified an overseas suspect in the Heartland Payment Systems breach. Evan also has some other updated info on the breach: The processor first learned of the breach (when alerted by Visa and Mastercard) in late October/early November, said Heartland spokesman Jason Maloni....

Data Theft Hits Mainers

Fraudulent charges from Heartland breach were appearing between May 16 and August 19th. Tux Turkel reports: Hundreds of Maine credit and debit card holders appear to have been victims of a nationwide data theft carried out against Heartland Payment Systems, which processes cards for 250,000 restaurants, retailers and other businesses. Several Maine credit unions...

UK: Hackers tried to steal hundreds of millions from bank, court told

David Brown reports: An international gang plotted to steal £229 million from customers’ accounts at a leading bank by hacking into computers, a court was told yesterday. A security supervisor smuggled two Belgian computer hackers into the London offices of Sumitomo Mitsui Banking Corporation by pretending that they were friends who had arrived for...

PCI’s Shield Suffers Another Blow As Heartland Reports a Hack

More on the Heartland Payment Systems breach reported earlier today…. from Digital Transactions: Princeton, N.J.-based Heartland is one of the nation’s largest acquirers, processing for about 250,000 merchant locations. It has a number of business units, including its so-called Network Services segment serving mostly petroleum retailers that Heartland bought last year from Alliance...

Heartland Payment Systems Uncovers Malicious Software In Its Processing System (updated)

From their press release: Payments processor Heartland Payment Systems has learned it was the victim of a security breach within its processing system in 2008. Heartland believes the intrusion is contained. No merchant data or cardholder Social Security numbers, unencrypted personal identification numbers (PIN), addresses or telephone numbers were involved in the breach....