Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Heartland Payment Systems Hacked, Possibly 100M Accounts Stolen
Daily Tech ^ | January 21, 2009 11:19 AM | Tom Corelis

Posted on 01/21/2009 3:09:52 PM PST by xcamel

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-4041-57 next last
To: informavoracious

The type of folks that are Obamamaniacs are also the types of folks who would steal and spend other peoples’ money (even on credit cards).


21 posted on 01/21/2009 4:26:10 PM PST by traditional1 ("The American presidency is not supposed to be a journey of personal discovery")
[ Post Reply | Private Reply | To 6 | View Replies]

To: FreePaul

99,999,999 others, to be exact...


22 posted on 01/21/2009 4:34:02 PM PST by xcamel (The urge to save humanity is always a false front for the urge to rule it. - H. L. Mencken)
[ Post Reply | Private Reply | To 20 | View Replies]

To: xcamel
“Heartland believes the intrusion is [now] contained,” reads the press release.

LOL!

23 posted on 01/21/2009 4:35:12 PM PST by fanfan (Update on Constitutional Crisis in Canada.....Click user name)
[ Post Reply | Private Reply | To 1 | View Replies]

To: xcamel

Match that data with all of the $25 BO internet donations, remember how his internet guru was not aware that credit card processing companies had the ability to perform address verifications?


24 posted on 01/21/2009 4:40:13 PM PST by BigDaddyTX (Don't Mex with Texas)
[ Post Reply | Private Reply | To 1 | View Replies]

To: BigDaddyTX

“The investigation of the Century” - that aint-not-ever-gonna-happen


25 posted on 01/21/2009 4:42:26 PM PST by xcamel (The urge to save humanity is always a false front for the urge to rule it. - H. L. Mencken)
[ Post Reply | Private Reply | To 24 | View Replies]

To: xcamel

Most amazing is that a company of this size and exposure would not be doing real-time network monitoring. At the very least, a decent firewall and log review would have shown the suspicious outbound traffic. There is just no excuse for this.


26 posted on 01/21/2009 5:12:06 PM PST by Not_Who_U_Think
[ Post Reply | Private Reply | To 1 | View Replies]

To: Enterprise

Exactly the same thing happened to me yesterday as well.

1st Transaction $103 ITunes

2nd Transaction $206 ITunes denied by bank.

I asked about it and they claimed they have people monitoring transactions and they notice unusual activity which is out of the normal pattern of purchases. I called BS, but they played dumb.


27 posted on 01/21/2009 5:50:00 PM PST by DaoPian (Don't Tread on Me)
[ Post Reply | Private Reply | To 15 | View Replies]

To: fanfan

I use Heartland for processing in my business. This is the first I have heard of this. I guess a phone call is in order. Someone has some “splainin” to do.......red


28 posted on 01/21/2009 5:57:06 PM PST by rednek (if it isn't large caliber, it isn't worth carrying)
[ Post Reply | Private Reply | To 23 | View Replies]

To: xcamel

Another reason to pay cash.


29 posted on 01/21/2009 5:57:56 PM PST by RKBA Democrat (Lord Jesus Christ, Son of God, have mercy on me, a sinner!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: AdmSmith; Berosus; Convert from ECUSA; dervish; Ernest_at_the_Beach; Fred Nerks; justiceseeker93; ..

Hey, the money for the inauguration had to come from *somewhere*.


30 posted on 01/21/2009 6:05:24 PM PST by SunkenCiv (https://secure.freerepublic.com/donate/____________________ Profile updated Monday, January 12, 2009)
[ Post Reply | Private Reply | To 1 | View Replies]

To: rednek
Oh, jeez, I wouldn't want to be in your shoes.

Depending on other people very rarely works out.

31 posted on 01/21/2009 6:07:12 PM PST by fanfan (Update on Constitutional Crisis in Canada.....Click user name)
[ Post Reply | Private Reply | To 28 | View Replies]

To: xcamel

OK, so who’s Heartland and who’s credit card accounts do they process?


32 posted on 01/21/2009 6:09:25 PM PST by meyer (We are all John Galt)
[ Post Reply | Private Reply | To 1 | View Replies]

To: xcamel
And this effects my Obama-sourced gas tank fillings and mortgage payments how?

Seriously though, this is precisely the financial infrastructural component weakpoint that Obamacampaign08 took advantage of to help itself to American's credit funds.

Looks like Hell has dissension in its ranks...

33 posted on 01/21/2009 6:18:19 PM PST by Starfleet Command
[ Post Reply | Private Reply | To 1 | View Replies]

To: DaoPian

It appears that we did not have anything charged to the card. They need the 3 digit security code on the back if they are going to charge something online (ideally) and they need the 4 digit code to use it as a debit card. We tend to use the card to try to pay cash for gas and restaurant expenses, so now it will be 7 to 10 days before we get another card. Bummer.


34 posted on 01/21/2009 6:29:03 PM PST by Enterprise (A Representive Republic - gone now. Foolish people.)
[ Post Reply | Private Reply | To 27 | View Replies]

To: meyer
They offer payment services. 6th largest processor of credit cards.

They also do checks and many other services. You don't really know if a business is using them. Even if you ask most of the people running your card would never know.

I think it is kind of dirty they released this info yesterday.

35 posted on 01/21/2009 6:36:09 PM PST by sausageseller (http://coolblue.typepad.com/the_cool_blue_blog/)
[ Post Reply | Private Reply | To 32 | View Replies]

To: antiRepublicrat
This is just an excuse for poor security practices.

Yup. Heartland basically allowed their HR department to define their internal security. I'll betcha the HR director said, "Him?! He's the last guy I woulda suspected!!"

36 posted on 01/21/2009 6:44:38 PM PST by randog (Tap into America!)
[ Post Reply | Private Reply | To 19 | View Replies]

To: RobRoy
“Sub-25 cent transactions” This is sorta new, isn’t it. The hackers seem to be doing what banks, etc. have been doing for decades - charge lots of people a little money. No real “victims” in a case like this.

No those transactions are "tests" if they go through, then the fraudsters lay low or sell the card info with the "test" report to prove it's valid, and then POW the big charges come in later.

37 posted on 01/21/2009 6:52:31 PM PST by ElkGroveDan (Reagan is back, and this time he's a woman.)
[ Post Reply | Private Reply | To 14 | View Replies]

To: xcamel
Heartland CFO and president Robert Baldwin, in an interview with BankInfoSecurity.com, said his company was confident that the only data picked up was cardholders’ names and credit card numbers.

Look for an uptick in web-based donations to The One's campaign. /sarc>

Cheers!

38 posted on 01/21/2009 9:03:53 PM PST by grey_whiskers (The opinions are solely those of the author and are subject to change without notice.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: xcamel

Ahhh jeez! This is the company I do biz with to handle credit card transactions at my store!
This is news to me.
HO-LEEE CRAP.


39 posted on 01/21/2009 9:28:30 PM PST by ozark hilljilly (Ignorant, pushy noob since 4/08)
[ Post Reply | Private Reply | To 1 | View Replies]

To: jimtorr
Never mind the OS platform, how about just encrypting credit card numbers on their local network?

Mind waiting 10 minutes for the authorization to go through? Trust me if you decide to encrypt all the transactions you are going to miss every SLA you have.

I think what he means is that internal encryption would delay authorization by a second or two, and besides, it would cost money.

A previous employer decided to do ejb to ejb encryption on a J2EE platform and saw response time go from 2 seconds to 5 minutes. Yes per transaction in isolation you're only talking about 1 or two more seconds but that causes a serious log jam within a shot time and eventually the load on the cpu bring everything to a halt.

The bigger question is what was their security policy beyond encryption. What workstations had direct access to the core network and why was heartlands monitoring of outgoing traffic so weak.

Now I have to worry if my card is compromised. I think the inevitable lawsuits will cost a lot more that fast internal encryption.

We are going to have new cards issued regardless...

My company does encryption on all data and telephone leaving our building.

But not on your internal network!

Modern, fast encryption slows transmission very minimally.

Any encryption worth it is going to slow the processing of millions upon millions of transitions down significantly on a high volume app..

40 posted on 01/22/2009 5:49:48 AM PST by N3WBI3 (Ah, arrogance and stupidity all in the same package. How efficient of you. -- Londo Mollari)
[ Post Reply | Private Reply | To 17 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-57 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson