ND1130113

Title: Save Mart Supermarkets Experiences Self-Service Checkout Breach

Description: While not a big incident, the compromised card readers underscore how especially important vigilance is for retailers with self-service kiosks and terminals.

Page Content:

MODESTO, Calif. ? Save Mart Supermarkets had a card-reader breach at 20 locations recently, BankInfoSecurity reports. While a relatively small compromise, the breach happened at self-service checkout terminals. The grocer released very little detail about the incident except to say the tampering was discovered during routine maintenance and that all defective card readers had been replaced.

�

?We are not aware nor have we been notified of any reports that customer accounts were compromised,? Save Mart said in a statement. ?As a precaution, we are recommending anyone who has used the self check-out lane in the affected stores to verify/monitor all credit/debit accounts with their financial institution to ensure everything is in order.?

�

The Save Mart breach has similar features to the Michaels POS compromise in May that affected 90 locations. ?Criminals realize that retailers are understaffed to the point that swapping out a POS will go unnoticed,? as what happened with Michaels,? said McAffee consultant Robert Siciliano.

�

?Once they determine the make and model of an easily swappable device, they target a chain they can easily comprise. It's also possible they may be employed (or were employed) by the companies that install and service the systems, in the form of an inside job,? he said.

�

NACS spokesman Jeff Lenard pointed out that the self-service POS has additional challenges for retailers.

�

?Thieves are, and will continue to, target self-service devices that do not have regular personnel supervising the system,? said Lenard. ?Self-serve POS is right there with pay-at-the-pump, kiosks and ATMs.?

?

Content Subject: Risk Management & Security

Formatted Article Date: November 30, 2011

nasa education