Security
here's another example of security breaching at retail stores.
http://www.msnbc.msn.com/id/23698169/
As of today, network admins still don't know how it was done.
by hal 9000
With the large amount of information provided. But It does reinforce my firm belief to only hand over Cash at any place and never trust any form of On Line transaction. :D
Now I wonder how the Banks dealt with the Transaction on the Debt Cards as their Security doesn't appear to have been breached so are they saying it's not their problem?
Col
by rob miners
this statement it looks as though they may have a clue. :)
The stolen data was limited to credit and debit card numbers and expiration dates, and was illegally accessed from our computer systems during transmission of card authorization," said Hannaford CEO Ron Hodge, in a statement posted to the company's Web site.
by jmgarvin
I knew you could!
Ya, somebody got greedy and snagged that data.
by cg it
tough to break in from the outside though the security firms will have one believe otherwise.
And if it's an inside job, someone in the IT department had to be in on it. From what I gather, the #s were encrypted to privacy and that was hacked as well.
by rob miners
by nicknielsen
It's possible that somebody went in through the store's inventory control wireless, but that involves some serious computing power. The PCI standard requires WPA-PSK keying on wireless networks in stores. It can be broken, but as you say, it's not probable.
The story also mentions that "Hannaford stores...do not use wireless systems" to transmit credit/debit data.
by cg it
no wireless systems to send credit data.
Not so sure the inventory control system would be a vunderability.
by nicknielsen
Hacking into the store wireless would provide Layer 2/3 access. For grabbing credit/debit info, the target wouldn't be the store server, but the router traffic.
edit
by jmgarvin
If the traffic was encrypted, as they said it was, it would be VERY difficult to get any meaningful data.
Gotta be an inside job....
by hal 9000
There is nothing here to imply that multiple Banks or Credit Faculties where exposed just that some Credit/Debit Cards details where stolen. If they all came from the same clearing house the Exposure could just as easily been at the other end and have nothing to do with the shop at all.
Way to little information to make a guess as to what has happened here still.
Col
This discussion is closed to new replies.
Sort by Trending