SecurityRatty :: tag: retail
Featured Articles :: Examining the FFIEC Retail, Wholesale, and E-Banking guides :: J.C. Penney customers affected by lost GE Money backup tape :: YWCA Retirement Fund participants exposed in stolen computer :: PCI compliance are you just checking the box? :: Hannaford and Sweetbay supermarkets announce compromise of 4.2 million credit and debit cards :: Conmen Abuse Web Address Checks :: Montgomery Ward breached, no notification obligation? :: Do you trust the merchants to protect your credit cards? :: The Cipher on the Wall :: Wireless LAN scan finds big security holes in NYC retailers wireless nets
What are the commonalities and differences of the FFIEC Retail, Wholesale and E-Banking guides and where do they overlap? Compliance guru Dorian Cougias answers these questions and more
...retailers" which include "many of the large retail organizations
Number Affected
650,000
Types of Data
Names, addresses, account numbers, Social Security numbers, and other information
Breach Description
GE Money and it's backup storage vendor, Iron Mountain are unable to locate a backup tape. The unencrypted tape contained sensitive...
...retail outlets but must be ordered from the computer manufacturer which requires the computer's serial number, the customer's account number and name. Dell has been notified of the theft. Any attempted order will be flagged, the caller id will be recorded and forwarded to both the Fund and the New York Police Department with whom we met...
...retailers are facing in complying with the Payment Card Industry (PCI) standards . I speak with many retailers in my role BitArmor helps them secure and manage cardholder data in their environments. One of the challenges that retail CISOs face is selling senior management on the funding of PCI initiatives. Often, senior management would...
...retail locations in the Northeast that carry Hannaford products
Number Affected
4,200,000
Types of Data
Credit card and debit card information
Breach Description
New England grocery chain Hannaford Brothers says a security breach has exposed 4.2 million customer credit- and debit-card numbers to scammers, with 1,800 fraud cases already...
...retail website
But the UKs payments association said it had seen no evidence that the novel crime was being carried out
Its pure chance that we picked this up, said Andrew Goodwill, director of anti-fraud firm The Third Man
The scam exploits the mechanics of the Address Verification System (AVS) that many retail sites use to check the address...
...retail properties
Evan] The AP story names five of the six Direct Marketing Services retail properties (See Above). I don't know what the sixth is
It now runs a Wards.com Web site along with six other sites, including three with Sears brands it has acquired: SearsHomeCenter.com, SearsShowplace.com and SearsRoomforKids.com
Milgrom said Direct...
...Retail Federation (NRF) Chief Information Officer and Senior Vice President, David Hogan wrote a letter to the Payment Card Industry (PCI) Standards Council requesting that the card industry to stop requiring merchants to store complete card numbers. Currently, some merchants are required to keep credit card numbers for up to 18 months to...
...retail transactions on the Web. If there is writing on the wall for 1024-bit RSA, though, what's written is in cipher--and it's wholly unclear how long the cryptanalysis will take