A leading payments industry news source for more than 17 years. Glenbrook curates the news and keeps you abreast of the important daily headlines in payments.

Search Payments News

July 24, 2018

On the web

Hackers Breached Virginia Bank Twice In Eight Months, Stole $2.4M

Krebs on Security

“Hackers used phishing emails to break into a Virginia bank in two separate cyber intrusions over an eight-month period, making off with more than $2.4 million total. Now the financial institution is suing its insurance provider for refusing to fully cover the losses. According to a lawsuit filed last month in the Western District of Virginia, the first heist took place in late May 2016, after an employee at The National Bank of Blacksburg fell victim to a targeted phishing email.”

July 13, 2018

Top Post

Macy’s Online Data Breach Exposes Customer Card Data

Cards International

“US-based retailer Macy’s has reported an online data breach, which compromised customers’ personal data including credit card information. The incident is found to have occurred between April and June this year. It exposed credit and debit card numbers and expiration dates, names, addresses, phone numbers, email addresses and birthdays of customers who shopped online at macys.com and bloomingdales.com.”

On the web

IBM Studies Data Breach Impact

Mobile Payments Today

“IBM Security has released a global study examining the full financial impact of a data breach on a company’s bottom line. The study found that hidden costs in data breaches — e.g., lost business, negative impact on reputation and employee time spent on recovery — can be a huge factor. In a “mega breach” of 1 million or more records, one-third of the cost derived from lost business. And the cost is on the rise; since the 2017 report, the average cost of a data breach globally has increased 6.4 percent, to $3.86 million, according to IBM. The number of mega breaches is also up — from nine in 2013 to 16 in 2017.”

July 10, 2018

On the web

Security Firm Sued For Failing To Detect Malware That Caused A 2009 Breach

Bleeping Computer

“In January 2009, Heartland announced a major security breach of its network, following which an attacker stole details for over 100 million payment cards stored on its systems by over 650 of Heartland’s customers. Following this devastating hack and one of the biggest of the 2000s, Heartland paid over $148 million in settlement fees for various lawsuits, and other remediation costs and expenses Heartland owed its customers. As part of their insurance agreements, the two firms paid $30 million to Heartland in the hack’s aftermath, with the Lexington Insurance Company footing a $20 million bill, and the Beazley Insurance Company paying another $10 million.”

June 29, 2018

On the web

Ticketmaster Discloses Payment Card Data Breach In UK

Cards International

“Ticketmaster, a ticket sales and distribution company, has suffered a breach that compromised payment card and personal information of customers who made purchases on its UK website. According to the company, the breach was carried out through malicious software on a customer support product by third-party supplier Inbenta Technologies. The product has now been disabled across all of Ticketmaster websites.”

May 14, 2018

On the wires

Notice Of Unauthorized Access To Chili’s Grill & Bar Guest Data

“What Happened? On May 11, 2018, we learned that some of our Guests’ payment card information was compromised at certain Chili’s restaurants as the result of a data incident. Currently, we believe the data incident was limited to between March – April 2018; however, we continue to assess the scope of the incident. We deeply value our relationships with our Guests and sincerely apologize to those who may have been affected.”

May 8, 2018

On the web

Equifax sends Congress more details on massive data breach

The Hill

“According to filing, hackers accessed names and birthdates of roughly 146.6 million U.S. consumers; Social Security numbers of 145.5 million; addresses of 99 million; gender of 27.3 million; phone numbers of 20.3 million; driver’s license numbers of 17.6 million; email addresses of 1.8 million; payment card numbers and expiration dates of 209,000; TaxIDs of 97,500; and driver’s license states of 27,000.”

May 2, 2018

On the web

Australia’s Largest Bank Lost The Personal Financial Histories Of 12 Million Customers

BuzzFeed

“BuzzFeed News can reveal that the nation’s largest bank lost the banking statements for customers from 2004 to 2014 after a subcontractor lost several tape drives containing the financial information in 2016. While the bank initially notified the Office of the Australian Information Commissioner (OAIC) of the breach shortly after it became aware of it in 2016, a spokesperson for the OAIC told BuzzFeed News it was now making further inquiries into the privacy breach, following a damning report into the bank’s culture released on Tuesday.”

April 23, 2018

On the web

SunTrust Says Ex-Worker May Have Stolen Data on 1.5M Clients

U.S. News

“SunTrust Banks Inc. says accounts for 1.5 million clients could be compromised following a potential case of data theft. The Atlanta bank said Friday that a former employee may have stolen the data and an investigation is ongoing. Compromised information could include names, addresses, phone numbers and account balances. SunTrust says it will offer identity protection for all consumer clients at no cost on an ongoing basis. The company says it has not yet identified any fraudulent activity related to this incident.”

April 11, 2018

On the web

New Verizon Report Sheds Light on Hospitality-Industry Data Breaches

Digital Transactions News

“Data breaches at restaurants and hotels are nothing new, but a just-out report from Verizon Communications Inc. shows how extensively the hospitality industry gets hit by hackers. New York City-based Verizon, which besides telecommunications has a large business in investigating data breaches, says in its latest annual breach study that it investigated 368 incidents of data compromises at accommodation and food-services businesses last year, 338 of which resulted in confirmed disclosure of data to unauthorized parties.”

April 9, 2018

Top Post

Best Buy is latest retailer caught up in data breach

Chain Store Age

“Yet another retailer — the fourth in seven days — is involved in a cyberattack. Best Buy has issued a warning that some of its customers’ payment information may have been compromised in a data cyberattack on the third-party operator of its chat services, a company called (24)7.ai. The breach occurred between Sept. 27 and Oct. 12, 2017.”

April 6, 2018

On the web

Best Buy Customers Have Also Been Caught Up in Vendor Payment Data Breach

Digital Transactions News

“Count Best Buy Co. Inc. as another unwilling member of the [24]7.ai Inc. breach that has yielded customer payment information already from Sears Holdings Inc. and Delta Air Lines Inc. In a statement released Thursday, Best Buy disclosed that an unspecified number of customers were affected when the online chat vendor’s network was infiltrated last fall.”

Payments News

Give us your email address or link to our RSS feed and we’ll push the daily Payments News headlines to you.

Glenbrook Payments Boot camp®

Register for the next Glenbrook Payments Boot Camp®

An intensive and comprehensive overview of the payments industry.

Train your Team

Customized, private Payments Boot Camps tailored to meet your team’s unique needs.

OnDemand Modules

Recorded, one-hour videos covering a broad array of payments concepts.

Glenbrook Press

Comprehensive books that detail the systems and innovations shaping the payments industry.