8000 CBA credit card details unleashed in breach

Powered by SC Magazine
 

Penalties considered after Mastercard, Visa investigation.

The Commonwealth Bank has cancelled some 8000 credit cards after it detected a data breach at a merchant.

CommBank noticed fraudulent transactions over its network and alerted card issuers Visa and MasterCard, the breached merchant and its acquiring bank, and affected customers.

The bank did not release the name of the affected merchant and its acquiring bank, or when the breach occurred.

“[CommBank] continuously monitors all credit card transactions to protect our customers from fraud and during this process we became aware of a potential credit card compromise through an Australian merchant acquired by another bank,” a spokesperson said.

“Customer cards are being reissued as a matter of priority.”

Mastercard and Visa may issue penalties including fines to the acquiring bank, not CommBank, under the payment industry’s PCI-DSS compliance rules.

The rules impose minimum security standards on merchants according to their size. It demands, among other requirements, that credit card data be encrypted so it could not be read in the event of a data breach.

The severity of the penalties will depend on the merchant’s standard of PCI-DSS compliance at the time of the breach.

The acquiring bank may pass on the penalties to the merchant, but it is common practice in Australia for the banks to absorb the costs.

Australia's Privacy Commissioner is aware of the breach, but did not say if it is investigating the incident.

Copyright © SC Magazine, Australia


8000 CBA credit card details unleashed in breach
Yumi Kimura, CC BY-SA 2.0
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  39%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1031

Vote