Electronic payment intermediary Charge Anywhere reports data breach
Reprints
Charge Anywhere L.L.C., a firm that operates as an intermediary between retailers' point-of-sale systems and their payment processors, has reported that an unauthorized hacker may have had access to its consumer data as early as November 2009.
South Plainfield, New Jersey-based Charge Anywhere, which describes itself as a “provider of electronic payment gateway solutions to merchants,” said in an announcement last week that it discovered on Sept. 22 that an unauthorized person had installed malware that enabled him or her to capture segments of outbound network traffic that included plain text payment card transaction authorization requests.
The company statement said its investigation indicates that while it only found evidence of data capture from Aug. 17 through Sept. 24, 2014, the unauthorized hacker had the ability to capture network traffic as early as Nov. 5, 2009.
The company said the information involved in the incident may have included cardholder name, account number, expiration date and verification code.
The company said the issue did not affect any system or device at merchant locations, nor other service providers, and that the malware has been eliminated from its network. It also said it has been working with computer security firms to further strengthen its security measures.
The company said it has been working with credit card companies and processors to provide them with a list of merchants and the account numbers for credit cards used during the period at issue so banks that issued those cards can be alerted.
The announcement did not identify the retailers whose customers may have been affected. A company spokesman could not immediately be reached for further information.
Read Next
-
Judge won't dismiss credit card companies' case against Target
A federal judge has refused to dismiss litigation filed by financial institutions against Target Corp. in connection with last year's data breach involving about 110 million of the retailer's customers.
Related Stories
-
Judge won't dismiss credit card companies' case against Target
-
Payouts average $2.9M per cyber loss claim for large companies
-
U.S. urges banks to consider cyber risk insurance amid hacking threats
Most Read in Risk Management
-
1. Zurich North America names professional liability, cyber leader
-
4. Hub sues former broker for allegedly violating nonsolicitation agreement
-
5. Aon reports 5% revenue increase; looks to middle-market growth
