
Yesterday I told you about the Heartland Payment Systems breach. It’ll be a long time before the dust settles on this one. As of today, the press is speculating that 100 million card numbers were exposed. I’m still predicting it will be more in the neighborhood of 300 million. I explained the justification for that number in yesterdays post. And by the way, I’m not necessarily blaming Heartland for all this. They are a victim too. On the other hand, we have a (perhaps unrealistic) expectation that payment processors aren’t going to have these problems.
Ironically, as I was researching Heartland’s background, I came across a PDF that was written by their Chief Security Officer, entitled Your Business’s Data Has Been Compromised. Now What?
What’s even more ironic is that the document is showing a creation date of October 24, 2008. According to my sources, the six-month ongoing attack was in full swing when the document was written. Almost as much of it is about preventing a compromise as is about what to do if one happens. Notice that Heartland’s tag line is “The Highest Standards – The Most Trusted Transactions.”
Think they should change it?
Similar Posts:
- Heartland Data Breach rears its ugly head again
- Genesco suffers breach – Not PCI compliant?
- Albert Gonzales may be in Jail but it ain’t over for a long time.
- Card Breach Victim Gets Twenty Years ‘Probation’
- US Bank concealed a data breach?

