Sunday, March 09, 2014

More PCI pains

In a non-binding informal survey of family and friends these past two weeks, almost everyone polled reports they are fed up with having to have their bank/credit cards replaced.

Previous soap-box posts from this GSD blog:

Now even more reports are rolling in of these types of PCI hacks.  It was bad enough consumers had to be on the constant lookout for malware on their own systems that could steal their account information, then there are the ATM/skimmers we have watch out for, now, even within a merchant’s own POS systems and network these bad-boys lurk.

And even when notified by their own bank, now customers are doubly confused and hesitant if the call is legitimate or another social-engineering-hack-attack playing on the public fears and news reports.

When we got a similar call on the voice-mail last week, Lavie didn’t even bother writing down the call back number left (good girl!). Instead she pulled out our local bank branch contact information and went directly to the source.  Yep it was legit -- another merchant we shopped at also got hit in a breach similar to Target’s. Yep, more card replacements on the way; again.

A few simple searches on Google will demonstrate the bank card industry has been wresting with these issues for a long time. Only previously, it seems the scale of the problem had been small enough to fly under the general public consciousness radar. With Target it was so big and touched so many that the barn doors were flung wide open and the cows were in the corn for everyone to see. Now we see shadows behind every merchant’s POS system.

The battle between the fraud perpetrators and the security pros ratchets up a few more notches. It’s the new cold-war baby…oh, wait…I hear that’s starting up again as well. I guess I need to start watching “The Americans” on FX to get prepared again.

For more reads on the topic; both breaches and proposed solutions to get the cows back in the barn…

\sigh\

Claus Valca

No comments: