Big Credit Card Data Breach Hits Bars And Restaurants Using Harbortouch Point-of-Sale Systems
Consumerist
. ...
The issue this time around is with point-of-sale vendor Harbortouch. Security expert Brian Krebs flagged the hack on his site this week.
Unless you work in a few specific industries, you probably havent heard of Harbortouch. But theyre pretty huge: the company provides point-of-sale systems to roughly 150,000 businesses, generally restaurants and bars. Krebs reports that his sources at card-issuing banks say that at least 4200 Harbortouch customers nationwide appear to have been breached.
As we have seen plenty of times before, and will continue to see plenty more times, this hack involved point-of-sale terminals being infected with malware. Once in place, the malware scrapes card data from affected merchants at the time of swipe, and sends it zipping merrily off to people who should not have it.
Harbortouch confirmed the breach in a statement to Krebs, saying, The incident involved the installation of malware on certain point of sale (POS) systems. They added, The advanced malware was designed to avoid detection by the antivirus program running on the POS System. Within hours of detecting the incident, Harbortouch identified and removed the malware from affected systems.
More
http://consumerist.com/2015/05/05/big-credit-card-data-breach-hits-bars-and-restaurants-using-harbortouch-point-of-sale-systems/