Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Security breach may have exposed 40M credit cards

MasterCard blamed a third-party payment processing firm
 

Sign up to receive Security Resource Alerts

June 17, 2005 (IDG News Service) -- A hacker was able to access potentially 40 million credit card numbers by infiltrating the network of a company that processed payment data for MasterCard International Inc. and other companies, MasterCard said Friday.

MasterCard has notified banks that issue its credit cards about the security breach, which victimized CardSystems Solutions Inc., a Tucson, Ariz. back-office processing company, said Jessica Antle, a MasterCard spokeswoman. Those banks will then take steps to notify their customers as they see fit, she said.

The network at CardSystems had certain vulnerabilities that allowed an outsider to access the card numbers, 13.9 million of which were connected to MasterCard cards, Antle said. MasterCard's fraud detection system first became aware of the infiltration in May, and the company promptly launched an investigation into the breach.

However, the complicated investigation was not completed until earlier this week, when MasterCard was able to determine which credit card numbers were exposed and notify the banks that issued those cards, Antle said. Ubizen NV handled the initial forensic investigation, and the case has also been turned over to the FBI. As far as MasterCard is aware, the person who infiltrated the CardSystems network has not yet been identified.

Companies such as CardSystems process payment data for multiple credit card companies, which is why MasterCard numbers only accounted for 13.9 million of the numbers, Antle said. No other types of personal information, such as Social Security numbers, were compromised in the breach, she said.

Cardholders can dispute purchases that were not made by them with the bank that issued their card, and card holders will not be held liable for any purchases determined to have been made fraudulently, Antle said.

Security breaches don't always happen through hacking into a company's network. Citigroup Inc. recently notified customers that the credit information of 3.9 million customers was inside a package that disappeared while in transit from New Jersey to Texas in the care of United Parcel Service Inc.


Reprinted with permission from

For more news from IDG visit IDG.net
Story copyright 2006 International Data Group. All rights reserved.


Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
Security breach may have exposed 40M credit cards
"Debian, the popular Linux distribution has just been shown to have made an all-time stupid security goof-up. They managed to..." Read more...
"Houston area overrun by ants -- no, not atomic mutants. Sorry. Maybe even worse. At least you could kill Them..." Read more...
Read more Security posts or See all Blogs
HP confirms XP SP3 endless reboot snafu, promises patch
Yahoo tells Icahn that its own board knows best
Tools circulate that crack Debian, Ubuntu keys
More top stories...
Former Microsoft manager offers free fix for XP SP3 'endless reboot'
Elgan: Hyperconnectivity: Friend or foe?
Can Icahn take on the Yahoo board and win?
Specialists have retrieved about 99% of the data on a disk drive on board the crashed space shuttle Columbia. Don't miss the photographs of the recovered drive.
These big ideas were supposed to revolutionize technology, but they never actually appeared. In a few cases, you'll be glad they didn't.
Nearly 20 years after the first Internet worm, Steven J. Vaughan-Nichols takes stock of the malware/anti-malware landscape and spotlights how the two sides are approaching the battle.
Though some thought it was released too soon, Mac OS X 10.5 has matured into a solid operating system, says reviewer Michael DeAgonia.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
Long Tail Supplier Collaboration - What's In It For You?
Long Tail Supplier Collaboration - What's In It For You?
Download this webcast, free, compliments of Sterling Commerce
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Discover the Secret to Secure Remote Access: GoToMyPC Corporate Security White Paper
Spam Spikes: A Real Risk to Your Business
Six Support Issues That Keep Execs Awake at Night
View more whitepapers 
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the network security landscape has changed dramatically. Today's IT professionals still have the primary responsibility of protecting the confidentiality of corporate information, preventing unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.

Download this white paper 
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.

Download this white paper 
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.

View this demo