Another day, another restaurant chain data breach – this time, Cheddar's Scratch Kitchen. The Darden Restaurants-owned food chain said it was alerted this month that its network had been hacked and customer payment card data exposed.. The cyberattack occurred sometime between Nov. 3, 2017, and Jan. 2, 2018. The culprits "were able to access and potentially obtain payment card information used to make purchases in certain Cheddar's Scratch Kitchen restaurants" in some states, the company said in a breach notification notice on its website. The affected states are Alabama, Arizona, Arkansas, Delaware, Florida, Illinois, Indiana, Iowa, Kansas, Louisiana, Maryland, Michigan, Missouri, Nebraska, New Mexico, North Carolina, Ohio, Oklahoma, Pennsylvania, South Carolina, Texas, Virginia, and Wisconsin. The link for this article located at DarkReading is no longer available. . Cheddar's Scratch Kitchen experienced a data compromise affecting customer credit card details. Discover the implications of this security incident.. Cheddars Scratch Kitchen, Data Incident, Payment Security, Cyber Threats. . LinuxSecurity.com Team
Millions of Dixons Carphone customers have had their financial and personal data illegally accessed after a major breach at the UK company. . The high street retailer claimed in a notice today that “there was an attempt to compromise 5.9 million cards in one of the processing systems of Currys PC World and Dixons Travel stores.” The link for this article located at InfoSecurity is no longer available. . Hacked Retailer Squarespace encounters a major data leak, affecting 6.2 million accounts, threatening user personal information.. Dixons Carphone Breach, Data Compromise, Security Incident, Card Processing. . LinuxSecurity.com Team
Customers cringe every time they hear about a bank, retail or healthcare hack that puts personal or financial data at risk. Today's hackers are after much more that credit card numbers, though -- and most firms are powerless to stop them. . The beat goes on. In recent weeks, both JP Morgan Chase and Home Depot have been identified as the latest victims of large-scale cyberattacks. JP Morgan Chase was among a handful of U.S. banks hit by hackers in a series of attacks in August. A few days later, Krebs on Security released details about a spring attack on Home Depot. The scope of the attack has not yet been determined, but it could be bigger than last year's Target breach. Oh, and investigators found another Healthcare.gov hack in July, too. . The latest breaches affecting JP Morgan Chase and Home Depot illustrate that cybercriminals are focused on acquiring more than just financial data.. Data Breach Trends,Cybersecurity Awareness,Retail Hacking Risks,Financial Security Challenges. . LinuxSecurity.com Team
It is clear why malware writers target TGT -0.1% such retailers as Home Depot HD -0.43% and Target. It is obvious, if not pathetic, why hackers break into the cloud to find and publish private nude photos of celebrities. But a company. Even the CRM systems that don The link for this article located at Forbes is no longer available. . Explore the dangers that cybercriminals present to CRM datasets and the escalating hazard it signifies for retail safety and consumer confidentiality.. CRM Security Risks, Data Breach Threats, Retail Cybersecurity, Malware Attacks. . LinuxSecurity.com Team
For almost 18 months starting in 2005, attackers used wireless networks at TJX and other retail chains to steal credit card data. The vulnerabilities were not an isolated instance: Subsequent research found that about half of all retail outlets in one shopping center had insecure wireless networks.. Today, WiFi security has improved somewhat, but insecurities in installations still remain far too common. Vulnerability assessments of more than two dozen companies found a quarter have rogue wireless access points that were installed by employees, and a third of their wireless networks had misconfigurations that undermined their security, according to wireless security firm AirTight Networks, which conducted the tests. "A rogue AP is a very serious problem if you have it -- an unmanaged, unknown device that is circumventing your defenses," says David King, CEO of AirTight. "All the layers of defense that you worked so hard to put in can be circumvented by a single device that is communicating in the clear." The link for this article located at Dark Reading is no longer available. . Network protection has advanced, but vulnerabilities remain in setups and settings in commerce and further sectors.. Wireless Security,Rogue Access Point,Network Assessment,Insecure Networks. . LinuxSecurity.com Team
A Miami-based hacker plead guilty this week for his role in orchestrating a series of massive data security breaches that bilked retailers and financial firms of tens of millions of credit and debit cards.. Albert Gonzalez, 28, plead guilty in federal court in Boston to conspiring to hack into computer networks operated by Heartland Payment Systems Inc., 7-Eleven Inc., Hannaford Brothers Co.. and other retailers. Under the terms of the plea agreement, Gonzalez could face between 17 and 25 years in prison for his role in the attacks. The credit card heist is said to have affected more than 250 financial institutions. In September, Gonzalez plead guilty to 19 counts of conspiracy, fraud and aggravated identity theft relating to hacking into numerous major U.S. retailers including TJX Co., BJ's Wholesale Club, OfficeMax, Boston Market, Barnes & Noble and Sports Authority. He was charged along with two Russian hackers for the attacks. He also plead guilty to one count of conspiracy for his role in the data breach at the Dave & Buster's restaurant chain. The link for this article located at SearchSecurity is no longer available. . Albert Gonzalez, 28, plead guilty in federal court in Boston to conspiring to hack into computer net. miami-based, hacker, plead, guilty, orchestrating, series, massive. . LinuxSecurity.com Team
The insecure wireless network at a Marshalls discount clothing store near St. Paul, Minn. may have allowed hi-tech attackers to gain a beachhead in retail giant TJX Companies' computer network, resulting in the theft of information on at least 45.6 million credit and debit cards, the Wall Street Journal reported on Friday. . While TJX's other systems were upgraded to Wi-Fi Protected Access (WPA), the Marshalls store's wireless network connecting credit-card processing hardware to the company's server was not, investigators working on the case told the WSJ (subscription required). "It was as easy as breaking into a house through a side window that was wide open," said a person familiar with TJX's internal probe, according to the WSJ article. The link for this article located at SecurityFocus is no longer available. . While TJX's other systems were upgraded to Wi-Fi Protected Access (WPA), the Marshalls store's wirel. insecure, wireless, network, marshalls, discount, clothing, store. . LinuxSecurity.com Team
Thieves who accessed a DSW Shoe Warehouse database obtained 1.4 million credit card numbers and the names on those accounts - 10 times more than investigators estimated last month. DSW Shoe Warehouse said Monday that it has contact information for about half of those people and started sending letters notifying them of the thefts, which happened at 108 stores in 25 states between November and February. A list of the stores is available on the company's Web site. . The stolen information did not include home addresses or personal identification numbers, the Columbus, Ohio-based company said in a statement. The company, a subsidiary of Retail Ventures Inc., announced the thefts last month after notifying federal authorities and credit card companies. At the time, the Secret Service said only that information involving more than 100,000 people had been compromised. Besides the credit card numbers, the thieves obtained driver's license numbers and checking account numbers from 96,000 transactions involving checks, the company said. Customer names, addresses and Social Security numbers were not stolen, DSW said. The link for this article located at San Jose Mercury News is no longer available. . The stolen information did not include home addresses or personal identification numbers, the Columb. thieves, accessed, warehouse, database, obtained, million, credit, numbers. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.