[ISN] Is Global Payments the Only Breach?

http://www.bankinfosecurity.com/articles.php?art_id=4646

By Tracy Kitten
Bank Info Security
April 3, 2012

Has there been a second, undisclosed payment card data breach?

In the wake of the latest revelations about the Global Payments Inc. 
breach, some fraud analysts wonder whether they might be seeing signs of 
a separate breach.

In an April 2 conference call, Global Payments CEO Paul R. Garcia said 
the payments processor self-discovered and reported its breach in 
mid-March; that it involves fewer than 1.5 million accounts; that only 
Track 2 data was stolen; and that, to date, no fraudulent transactions 
have been tied back to the breached data.

But Gartner analyst Avivah Litan says this statement does not jibe with 
information contained in a recent Visa alert, which suggested Track 1 
and Track 2 data had been exposed. Unless details have changed since the 
time Visa issued its alert and the Global Payments press conference 
Monday, she questions whether Global Payments is the only breach.

"The information we have so far came from Global Payments," she says. 
"They made a big point to say no merchant systems were involved, and 
that goes against what some of the other sources, that are credible, 
have said."

[...]


_______________________________________________
Please help InfoSecNews.org with a donation!
http://www.infosecnews.org/donate.html