July 20, 2005 (Computerworld) --
Visa U.S.A. Inc. and American Express Co. are terminating their contracts with a credit card transaction processing company that was hit by hacker attacks, potentially exposing 40 million card numbers to online intruders. In separate announcements, Visa and American Express said they are ending their relationships with CardSystems Solutions Inc. in Atlanta because the company didn't meet its contractual requirements in providing processing services for merchants that accept the credit cards. The companies will no longer allow CardSystems to process their transactions after October. Rosetta Jones, a spokeswoman for San Francisco-based Visa, said in a statement that the action against CardSystems comes "after an internal and forensics review of its processing practices demonstrated that -- in violation of Visa's rules -- it did not have the appropriate controls in place to protect cardholder information." "Despite some remediation actions taken by the processor since the initial reporting of the data compromise, Visa cannot overlook the significant harm the data compromise and CardSystems' failure to maintain the required security protections has had on Visa member financial institutions and merchants, as well as the significant concerns it has raised for cardholders," Jones said. "CardSystems has not corrected, and cannot at this point correct, the failure to provide proper data security for Visa accounts." CardSystems apparently kept credit cardholder data on file after the transactions were processed, in violation of its agreement with Visa, she said. Because the data was still on file, it could be accessed by intruders. "Visa's security requirements were adopted precisely for the purpose of protecting cardholder information and guarding against the type of data compromise recently experienced by CardSystems," Jones said. Judy Tenzer, a spokeswoman for New York-based American Express, would not comment on the direct cause for the termination of the processing arrangements with CardSystems.
A spokesman for CardSystems didn't respond to numerous messages left by a reporter today. Last month, MasterCard International Inc. announced that 13.9 million of its credit card numbers were among the 40 million that may have been accessed by intruders who apparently infiltrated CardSystems' network (see Security breach may have exposed 40M credit cards). A MasterCard spokeswoman said the credit card company's fraud-detection system first became aware of the infiltration in May and the company promptly launched an investigation into the breach. In a statement yesterday, Purchase, N.Y.-based MasterCard said it will continue to allow CardSystems to provide transaction processing services because the company has worked to improve its security and procedures since the earlier incidents. "MasterCard has required CardSystems Solutions to develop a detailed plan to bring its systems into compliance with MasterCard security requirements by August 31, 2005," the statement said.
Moving to Windows Vista: The Promise, The Reality View this exclusive webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Quick Sizing Guide for SAS Grid Running on HP BladeSystems and EVA Storage
Download this white paper today! (Source: HP) Designed for CIOs, IT managers, data center managers and grid computing architects seeking to improve performance, SAS Grid Computing on the HP BladeSystem c-Class helps accelerate growth and mitigate risks with a simplified, consolidated infrastructure that's agile enough to efficiently handle change. SAS Grid Manager on HP BladeSystem can lower costs through automation, virtualization and improved IT efficiency. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Securing your network begins at the gateway, also called the perimeter, to keep unauthorized users, viruses and malicious code from entering your systems. Deploying multilayer technologies is your first line of defense. With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. One of the key facets of a successful security strategy is protecting the servers that run critical applications and house so much of your essential data. Having the right policies, procedures and server configurations is critical.
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.
Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.
See your link here
Subscribe to
Computerworld 
or
Other Security Stories
Moving to Windows Vista: The Promise, The Reality
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this white paper today!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
The Security Zone
Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.
Seth Weintraub:
Apple Macbook Event Liveblog
I'll be liveblogging here when the event begins. That's scheduled for 1 p.m. EDT. ... [more]
