Malware

Send in the lawyers (Heartland Payment Systems update)

Over on Computerworld, Jaikumar Vijayan reports that a class action lawsuit has been filed in the Heartland Payment Systems breach: A Pennsylvania law firm today filed the first class action lawsuit related to the breach. The lawsuit was filed by Chimicles & Tikellis LLP of Haverford, PA on behalf of Alicia Cooper, a...

UK: Details of the £229 million Japanese Bank Hacking Attempt Revealed

Computer hackers have reportedly applied sophisticated password-detection software application to steal £229million from one of the largest banking groups from Japan. The reports unveiled that a security supervisor from the bank helped Belgian hackers to enter into the offices of Sumitomo Mitsui Banking Corporation in London back in 2004. The company accounts targeted...

Hackers exploit Obama site to spread malware

Gregg Keizer reports: A social networking site operated by the 2008 Barack Obama campaign is serving up malware to unwary visitors a full week after the tactic was reported, a security researcher said today. My.BarackObama.com, still active after the innauguration last week of President Obama, is being used by hackers trying to dupe users...

Suspect identified in Heartland Payment Systems breach

Evan Schuman at Storefront Backtalk is reporting that the Secret Service has identified an overseas suspect in the Heartland Payment Systems breach. Evan also has some other updated info on the breach: The processor first learned of the breach (when alerted by Visa and Mastercard) in late October/early November, said Heartland spokesman Jason Maloni....

Data Theft Hits Mainers

Fraudulent charges from Heartland breach were appearing between May 16 and August 19th. Tux Turkel reports: Hundreds of Maine credit and debit card holders appear to have been victims of a nationwide data theft carried out against Heartland Payment Systems, which processes cards for 250,000 restaurants, retailers and other businesses. Several Maine credit unions...

UK: Hackers tried to steal hundreds of millions from bank, court told

David Brown reports: An international gang plotted to steal £229 million from customers’ accounts at a leading bank by hacking into computers, a court was told yesterday. A security supervisor smuggled two Belgian computer hackers into the London offices of Sumitomo Mitsui Banking Corporation by pretending that they were friends who had arrived for...

PCI’s Shield Suffers Another Blow As Heartland Reports a Hack

More on the Heartland Payment Systems breach reported earlier today…. from Digital Transactions: Princeton, N.J.-based Heartland is one of the nation’s largest acquirers, processing for about 250,000 merchant locations. It has a number of business units, including its so-called Network Services segment serving mostly petroleum retailers that Heartland bought last year from Alliance...

Heartland Payment Systems Uncovers Malicious Software In Its Processing System (updated)

From their press release: Payments processor Heartland Payment Systems has learned it was the victim of a security breach within its processing system in 2008. Heartland believes the intrusion is contained. No merchant data or cardholder Social Security numbers, unencrypted personal identification numbers (PIN), addresses or telephone numbers were involved in the breach....

WA: Hacker hits county Web site

San Juan County’s Web site was hacked January 15. The county Information Technology department is warning computer users to keep a close eye on their personal data if they accessed the site that day, although it does not appear that any data was compromised. About 8:35 a.m. Thursday, Jan. 15, 2009 morning the County’s...

Blaine Man Pleads Guilty to Sabotaging Former Employer’s Computer System

Slightly off-topic because no PII seems to have been involved, but suppose he had decided to capture transactions instead of just crashing the system? A 21-year-old Blaine man pleaded guilty yesterday in federal court in connection with sabotaging his former employer’s computer system after being terminated. David Ernest Everett Jr. pleaded guilty to one...