http://www.cbsnews.com/news/swiping-your-credit-card-and-hacking-and-cybercrime/
When you view the video, you will also see 2 major banks who expect breach's over the holiday season no matter how secure a company thinks their network is secure. We can help minimize the financial damage created by credit card breaches. PCI Compliance is huge and its not all network and equipment related as the 60 Minute video documents.
Monday, December 1, 2014
Friday, November 21, 2014
PCI NON-COMPLIANT CONSEQUENCES
|
Wednesday, November 19, 2014
Customers worry about theft of their data. You should worry about business fallout.
https://www.pcisecuritystandards.org/smb/why_secure.html
Friday, November 14, 2014
Thursday, November 13, 2014
Half of Holiday shoppers will avoid PCI breached retailers??
STUDY FINDS NEARLY HALF OF HOLIDAY SHOPPERS WILL AVOID BREACHED RETAILERS
A recent study by CreditCards.com has revealed that nearly half of major credit and debit cardholders are reluctant to shop at previously breached retailers this upcoming holiday season.
Additionally, only one in eight respondents stated they were more likely shop with credit cards this season, while 48 percent of respondents plan to shop for the holidays with cash, instead.
Survey respondents included 865 randomly selected cardholders living in the United States contacted by phone from October 2-5 by Princeton Survey Research Associates International.
However, despite some hesitation from certain customers, not all shoppers are likely to boycott a retailer after being hacked.
The study also discovered that the highest-income households ($75,000 income or above) were the least likely to avoid impacted stores, compared to 56 percent of those with earnings of less than $30,000 per year.
The list of breached mega retailers continues to grow significantly following the highly-publicized breach that compromised the information of 40 million Target shoppers last holiday season, now including Home Depot, Kmart, Michaels and Neiman Marcus.
According to the Identity Theft Resource Center, there have been 606 data breaches in this year aloneamounting to more than 77 million records exposed.
Ken Westin,Tripwire security researcher, says the increasing number and variety of breaches and security incidents has become a reflection of consumers’ reliance on technology and connectivity.
“We are now living in an age where cybercrime has become conventional crime,” says Westin. “Criminals have moved online simply because that is where the money is. Most of the breaches we see today can be traced to one common motivating factor greed.”
Westin adds the retail breaches we are increasingly seeing have netted criminal syndicates millions of dollars as breaches have become a repeatable and recurring revenue source.
Why is PCI DSS compliance important?
Why is PCI DSS Compliance Important?
Being compliant with PCI DSS means that you are doing your very best to keep your customers valuable information safe and secure and out of the hands of people who could use that data in a fraudulent way. Not holding on to data reduces the risk that your customers will be affected by fraud.
Don’t hold on to data that you don’t need to.
If you don’t need it, don’t store it.
If you lose card data i.e. suffer a data breach and you are not PCI DSS compliant you could incur Card Scheme fines for the loss of this data and may be liable for the fraud losses incurred against these cards and the operational costs associated with replacing the accounts. Your customers may also not want to do further business with you.
Unfortunately data breaches occur regularly and e-commerce sites are a very frequent target from hackers who often successfully compromise e-commerce sites. So please do not think that it won’t happen to you. It is imperative for you to ensure that you have implemented all of the relevant controls in PCI DSS.
PCI DSS is something that you MUST do.
Remember: you are responsible for looking after your customer’s card data, regardless who processes the data on your behalf.
HIPAA Settlements for Data Breach
Data Breach Results in $4.8 Million HIPAA Settlements
New York and Presbyterian Hospital
New York and Presbyterian Hospital (NYP) has agreed to pay OCR $3,300,000 to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules, and will adopt a corrective action plan to evidence their remediation of these findings.
Columbia University
Columbia University (CU) has agreed to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules, including a $1,500,000 monetary settlement and corrective action plan to address deficiencies in its HIPAA compliance program.
Wednesday, November 12, 2014
Subscribe to:
Posts (Atom)