Slashdot Mirror


Target and Trustwave Sued Over Credit Card Breach

jfruh (300774) writes "Security vendors like Trustwave can make big bucks when major companies decide they don't have the internal resources to handle their cybersecurity needs. Unfortunately, when taking on security chores, you also take on security liabilities. In the wake of Target's massive credit card security breach, both Target and Trustwave are now on the receiving end of a class action lawsuit, in part backed by banks that had to issue thousands of new credit cards." The filing, and a bit more from El Reg: "It's against Target, however, that the most serious allegations are levelled. The class action led by Trustmark National Bank and Green Bank, say the retailer should not have allowed an outside contractor the access to its network that brought about the breach, and that it violated federal and state laws in storing the credit card data on its network."

4 of 87 comments (clear)

  1. Sad to see it takes a lawsuit ... by UnknownSoldier · · Score: 4, Insightful

    ... for companies to get their shit together about their lax security policies.

    It is too bad temp credit cards (1-time use, 3-time use) aren't more practical.

    1. Re:Sad to see it takes a lawsuit ... by sconeu · · Score: 4, Informative

      AMEX used to provide this for on-line purchases. Alas, they discontinued about 7 or 8 years ago.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  2. Banks are responsible too by hawguy · · Score: 4, Insightful

    Banks hold some of the responsibility too -- why are they still issuing cards with 1970's era magstripe technology that is so easily intercepted and stolen? They claim that the merchants don't want to pay to install new credit card readers, yet only the banks have the power to force it on them (through fee penalties for those still use magstripes, or an outright mandate requiring new scanners). Even merchants that *want* to use safer technology can't do anything to make the banks issue the new cards.

    1. Re:Banks are responsible too by way2trivial · · Score: 4, Interesting

      Not precisely correct.

      Chip & pin is coming, it's not mandatory on merchants (yet) but if fraud is indicated and the merchant failed to have a chip terminal, and the customer has a chipped card the merchant will lose the chargeback automatically.

      Liability shift, will now be on one of two entities.
      The merchant, for not having the terminal, or the consumer, for not protecting their pin.

      the liability also shifts almost 100% OFF the card issuing bank....
      (the real reason)

      --
      every day http://en.wikipedia.org/wiki/Special:Random