Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Infrastructure & Control
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Heartland earns back spot on PCI-approved list

Payment processor had been delisted in March following investigation of major data breach

May 1, 2009 12:00 PM ET

Computerworld - The processing firm Heartland Payment Systems has been reinstated to Visa Inc.'s list of service providers deemed compliant with the Payment Card Industry Data Security Standard (PCI DSS).

The move follows Heartland's successful completion of an annual assessment for compliance with the PCI standard, the company said in a brief statement released on Friday. Heartland had been dropped from the list of compliant vendors by Visa in mid-March following an investigation into the massive data security breach announced by Heartland in January.

Visa's action raised questions about whether merchants and other organizations could continue using Heartland without being penalized for noncompliance themselves.

That's because Visa requires all entities that accept credit and debit cards issued under its name to work only with service providers that comply with the PCI rules, a set of security controls mandated by major credit card companies.

The doubts were heightened Heartland rivals began warning its customers of potential problems they could face if they continued using Heartland after it had been dropped from the list. Those claims led to Heartland sending cease and desist letters threatening legal action against rivals that did not stop scaring its customers.

Though Visa later issued a statement assuring Heartland customers that they could continue using the company without fear of being penalized, today's reinstatement removes any cloud of uncertainty that may have remained. "Heartland has passed its audit. We are excited and delighted," a Visa spokesman said today. The company will reappear on Visa's PCI-compliant list on Monday.

The Heartland breach, which some believe may have compromised as many as 100 million payment cards, also led to Heartland being put under an unprecedented probationary period by Visa. RBS WorldPay, which also processes payments, was also taken off the PCI-compliant list in March of this year after it disclosed a significant data breach in December 2008.

In a statement issued at that time, Visa said it was delisting the two payment processors based on "compromise event findings." The company had noted at that time it would consider putting Heartland and RBS WorldPay back on the compliant list (PDF document), but only after they were recertified by a third-party assessor.

Read more about security hardware and software in Computerworld's Security Hardware and Software Knowledge Center.



Jump to comments

Heartland Payment Systems

Additional Resources

Microsoft
Here are some of the key reasons why you would want to run Unified Access Gateway with DirectAccess.
Microsoft
Review how one energy firm tightened protection and simplified IT work using business-ready security solutions.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

What People Are Saying

White Papers & Webcasts

Why Your Small Business Needs a Real Server
Download this resource now!  

Maximizing Site Visitor Trust Using Extended Validation SSL
Provide site visitors visual cues that indicate your site is legitimate with Extended Validation (EV) SSL available from VeriSign.  

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Fraud Alert: Phishing - The Latest Tactics and Potential Business Impact
Read this white paper to learn how phishing attacks work, and how to avoid them.  

Top 9 Network Security Threats in 2009
Download this White Paper! Compliments on Perimeter eSecurity  

The Workday User Experience Video
Watch Workday's Creative Director, Scott Lietzke, discuss the business-centered design philosophy at Workday.

Business Process Framework Demo
Learn about Configurable Business Processes and Calculated Fields. Watch Now!


IT Jobs