First, the bad: the Wawa theft lasted nine months and looks like it netted 30 million+ cards. I'm not sure why they say "nationwide" when I've been all over the country and never seen one, unless they operate under different names in different places, but apparently they operate in 40+ states. Anyway, this looks like a central hack, maybe they ( Read more... )

And Disney+ is not yet a week old ( Read more... )

Classic spam:

"We have recently detected that different device user a attempted gaining access to your Online account linked with your email, and multiple password was attempted with your user ID ( Read more... )

It is indeed a doozy, perhaps the largest data privacy leak in history. Equifax has been collecting information on people for decades, and they do it without our express permission. But at the same time, they are used for credit scores and to generate bank decisions for our getting loans and such. Yet I never signed a contract with Equifax ( Read more... )

The only good thing to say is that it appears that they have done the sensible thing of isolating their corporate network from their payment terminal network. The penetration happened approximately six months ago but was just detected in January. They're in the process of investigating and cleaning up their act ( Read more... )

Needless to say, it hasn't stopped while I haven't written about it ( Read more... )

This one is slightly different. The thieves were more careful with how they're using the cards, and credit unions are being hit hard. One CU manager mentioned in the story said that they've gone through half their budget for credit fraud for the year -- IN JANUARY ( Read more... )

Back in June, many news sources reported that OPM got hacked and basically if you applied for a job with the Federal government in the last 20 years, your information was compromised.  Didn't matter if you were a park ranger or an office admin or what, you were compromised.  A more recent revelation is that fingerprint scans were also compromised ( Read more... )

A "gang" who claims to be an international syndicate but is more likely a small group, paid for a couple of criminals to lob Molotov cocktails at a company who discovered a Trojan that the gang developed to compromise ATMs. They sent threats to the security researchers, giving them a deadline to remove the research from their web site, and when ( Read more... )

October 1 is the deadline for merchants to be switched over to the new readers in the USA, otherwise they can be liable for any theft that takes place. But what is utterly ridiculous is that THEY DID A HALF-ASSED IMPLEMENTATION OVER HERE. No, correct that, quarter-assed. They would have to improve their implementation to be half-assed. THEY DO ( Read more... )