Heartland data breached (again)
Heartland Payment Systems sent out breach notification letters to over 2200 people potentially affected by a burglary at a Heartland Payroll office in California that resulted in the theft of unencrypted computers containing personally identifiable information. Six years after the company's record-setting breach of over 130 million debit and credit cards Heartland is fighting to redeem itself in the eyes of the infosec community.
In 2008 Heartland's security was compromised leaving the payment details of 130 million customers exposed to cybercriminals a state of affairs that caused the stock to plunge by almost 80%. This latest breach is not just a reminder that physical security is as important as the logical but also an indictment of Heartland who appear to have not fully learned from their last expensive lesson - they have again left data unencrypted. Many of the stolen units contained social security numbers and banking details - both very valuable commodities for cyber criminals.
0 comments:
Post a Comment