Two million credit cards breached at Buca di Beppo's parent company

[thewayne]

I don't post about these anymore because it's so flamin' common and so little is being done to prevent it. Company is breached, credit monitoring is offered, most banks cover their customer losses, wait until the next company is breached.

I only post this because I've eaten there a few times and really like the place. I had my 50th birthday party there in Phoenix with family and friends, we had a really good time.

Anyway, it was a point of sale breach between May 23, 2018 and March 18, 2019 and according to a company press release, the hack was found in "67 Buca di Beppo locations in the United States; a handful out of the total 31 Earl of Sandwich locations; and Planet Hollywood locations in Las Vegas, New York City and Orlando. Also impacted were Tequila Taqueria in Las Vegas; Chicken Guy! in Disney Springs, Fla.; and Mixology in Los Angeles."

https://krebsonsecurity.com/2019/03/a-month-after-2-million-customer-cards-sold-online-buca-di-beppo-parent-admits-breach/

Comments

[amaresu]

I lost my information in the Equifax breach. Someone tried to steal my tax refund last year.

At this point I'm just numb to this shit.

[thewayne]

Ditto to the numbness.  While I am not an IT security professional, I am a professional IT guy, and this shit just pisses me off.  It's so unbelievable that we can't have secure systems.  'Oh, we can't have 'pay at the table' because then the servers would know immediately how much the tip was and would know if we stiff them!'  'We can't have EMV chip readers everywhere because that's expensive!'  It just hurts my brain the places where corporations want to save money versus spending it in order to increase profit.  I KNOW security is hard and a never-ending battle, but it's one that must be fought.  There's just too much greed for money in the system.

[silveradept]

That's a facet of our modern life, I suppose, that all of our credit vehicles are going to be breached at some point and sold to people who want to use them for nefarious purposes.

Something about improving and increasing security that will never happen because that would involve investing money in something that will never turn a profit back, but only prevent large amounts of loss.

[thewayne]

Yep, the fact that IT is viewed as a cost center, not as something that is fundamental infrastructure that prevents loss.