Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Infrastructure & Control
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Heartland earns back spot on PCI-approved list

Payment processor had been delisted in March following investigation of major data breach

May 1, 2009 12:00 PM ET

Computerworld - The processing firm Heartland Payment Systems has been reinstated to Visa Inc.'s list of service providers deemed compliant with the Payment Card Industry Data Security Standard (PCI DSS).

The move follows Heartland's successful completion of an annual assessment for compliance with the PCI standard, the company said in a brief statement released on Friday. Heartland had been dropped from the list of compliant vendors by Visa in mid-March following an investigation into the massive data security breach announced by Heartland in January.

Visa's action raised questions about whether merchants and other organizations could continue using Heartland without being penalized for noncompliance themselves.

That's because Visa requires all entities that accept credit and debit cards issued under its name to work only with service providers that comply with the PCI rules, a set of security controls mandated by major credit card companies.

The doubts were heightened Heartland rivals began warning its customers of potential problems they could face if they continued using Heartland after it had been dropped from the list. Those claims led to Heartland sending cease and desist letters threatening legal action against rivals that did not stop scaring its customers.

Though Visa later issued a statement assuring Heartland customers that they could continue using the company without fear of being penalized, today's reinstatement removes any cloud of uncertainty that may have remained. "Heartland has passed its audit. We are excited and delighted," a Visa spokesman said today. The company will reappear on Visa's PCI-compliant list on Monday.

The Heartland breach, which some believe may have compromised as many as 100 million payment cards, also led to Heartland being put under an unprecedented probationary period by Visa. RBS WorldPay, which also processes payments, was also taken off the PCI-compliant list in March of this year after it disclosed a significant data breach in December 2008.

In a statement issued at that time, Visa said it was delisting the two payment processors based on "compromise event findings." The company had noted at that time it would consider putting Heartland and RBS WorldPay back on the compliant list (PDF document), but only after they were recertified by a third-party assessor.



Jump to comments

Heartland Payment Systems

Additional Resources

WHITE PAPER
Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.
WHITE PAPER
Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.
WHITE PAPER
Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

What People Are Saying

White Papers & Webcasts

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Optimizing Data protection Operations in VMware Environments
This Taneja Group Solution Profile identifies the data protection optimizations available in the VMware vSphere environment.  

Security Convergence Equals Network Security Cost Savings
Listen to IBM Internet Security Systems' take on network security convergence.

How to Defend Against New Botnets
Get this paper now!  

Maximizing Site Visitor Trust Using Extended Validation SSL
Provide site visitors visual cues that indicate your site is legitimate with Extended Validation (EV) SSL available from VeriSign.  

Fraud Alert: Phishing - The Latest Tactics and Potential Business Impact
Read this white paper to learn how phishing attacks work, and how to avoid them.