Clothing company Cotton Traders has been found to have had 38,000 customer credit card numbers taken from its website in an attack earlier this year. The firm has not directly confirmed the size of this attack as yet.
Barclaycard, the firm's card processor, was contacted as soon as the breach was discovered, and all cards were blocked. Security experts were brought in to fix any holes in the site, although the exact point of entry was not discovered.
The firm has said customers worried about their cards should contact their card provider.
View: BBC News
Barclaycard, the firm's card processor, was contacted as soon as the breach was discovered, and all cards were blocked. Security experts were brought in to fix any holes in the site, although the exact point of entry was not discovered.
The firm has said customers worried about their cards should contact their card provider.
View: BBC News
What happens to the customers who may now face Identify theft, headaches and lots of paper work.
A mere sorry and the good news that its now safe to shop at the site again?
Companies should be made accountable for breaches like this, and should lose their right to trade and all assets taken and used to pay off the cost of the breach because they didnt care enough in the first place.
One of the companies i've had to patch in the past has been a household name pretty much worldwide....and had a SQL injection hack in their login script....which was live and getting 100's of 1000's of hits a day!
It's about time there became some way of qualifying developers, or restricting who can work with sensitive materials such as credit card details. Or frankly, make it illegal to store the numbers...theres no reason why a site can't simply ask for the credit card data entering each checkout rather than storing it - send it straight to the card processor, and remove all trace of the card thus not having anything to be hacked / stolen....
In case of disputes, the merchants only require the transaction IDs from the credit card processor.
is it so hard to use a payment gateway?.
I'm pretty sure they will have to undergo a full audit by a PCI-DSS QSA now.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.