August 6, 2008

Credit Card Thieves Used Knowledge of Retail Computer Networks

It is estimated that 40 million credit card numbers might have been compromised by well coordinated attacks on large US retailers. TJX, DSW Shoes, BJ's Wholesale Club, OfficeMax, and Boston Market are a few of the retailers identified as having lost customer credit card data. The Department of Justice outlined the means used by thieves to steal credit card information. Some of the methods include wireless surveillance technology to capture unencrypted credit card point of sale data, and break-ins into computer networks owned by retailers. Two key privacy principles are implicated by the incidents: securing of personal information held by third parties, and not discarding information once payment is received and the benefit or service is provided.

DOJ: Credit card thefts helped by 'well designed' software, Computer World, August 5, 2008