Latest credit card hack: PF Chang's
Jun. 11th, 2014 09:28 am![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
thewayneAn unknown number of cards were compromised, Krebs reports "thousands" turning up for sale on carder sites on June 9th, the attack occurred between March and May of this year. Apparently their faster food chain Pei Wei is unaffected.
The interesting part is that this appears to be the same guy/group that did Target and Sally Beauty. They've made themselves one giant target....
Discussion on Kreb's site for this article talks about the need to switch to Chip & Pin, there's only one problem: it doesn't protect you from online purchases, since that will still require card-only because you don't have the device that lets you read the chip in the card. After that eBay hack, I switched my PayPal account to a verification system where they text you a number to enter to confirm the transaction. I wonder if this will help spread NFC phone tech, which is something that's been proposed before and with the continued growth in smart phone sales, increasingly viable.
http://krebsonsecurity.com/2014/06/banks-credit-card-breach-at-p-f-changs/
In other news that provides a nice contrast to the above, yesterday I bought a new camera online for about $2700, this morning I got a call from my bank asking about the charge since it didn't fit my previous patterns. I really appreciated that, it's nice to know that my bank is keeping an eye out for me. (and I'm REALLY going to appreciate my new camera when it gets here Monday!)
The interesting part is that this appears to be the same guy/group that did Target and Sally Beauty. They've made themselves one giant target....
Discussion on Kreb's site for this article talks about the need to switch to Chip & Pin, there's only one problem: it doesn't protect you from online purchases, since that will still require card-only because you don't have the device that lets you read the chip in the card. After that eBay hack, I switched my PayPal account to a verification system where they text you a number to enter to confirm the transaction. I wonder if this will help spread NFC phone tech, which is something that's been proposed before and with the continued growth in smart phone sales, increasingly viable.
http://krebsonsecurity.com/2014/06/banks-credit-card-breach-at-p-f-changs/
In other news that provides a nice contrast to the above, yesterday I bought a new camera online for about $2700, this morning I got a call from my bank asking about the charge since it didn't fit my previous patterns. I really appreciated that, it's nice to know that my bank is keeping an eye out for me. (and I'm REALLY going to appreciate my new camera when it gets here Monday!)
no subject
Date: 2014-06-12 08:55 pm (UTC)I think we could start assessing fines based on credit manipulation based on the extra interest that someone would be charged on, say, a mortgage based on their new score versus the old one. If we start with a multiplier based on that, we can start to assess appropriate amounts of damages. Bigger breaches mean more fines based on more people being potentially affected, which get revised upward as the actual costs of the fraud in relation to credit scores and bank accounts roll in.