Visa looks into Epos apps after US hack attacks

Visa has warned retailers that it is investigating two brands of Fujitsu-made point-of-sale software over the potential risk of hackers stealing customers’ card information, including PIN codes.

Visa has warned retailers that it is investigating two brands of Fujitsu-made point-of-sale software over the potential risk of hackers stealing customers’ card information, including PIN codes.

Fujitsu has denied its software is susceptible to such attacks. Fujitsu says its software is no less secure than any other system, adding it would have to be used with other types of third-party software to be under any sort of threat.

Visa is investigating the use of Fujitsu’s Raft and Globalstore software.

Visa issued the warning following a recent spate of debit card frauds that has seen criminals make unauthorised debits from US customer accounts held at Bank of America, CitiBank and other banks.

Criminals have used copies of cards to make purchases and withdraw cash from ATMs around the world, pointing towards an international fraud ring that has managed to steal the PIN details on cards.

The banks and the credit companies have blamed unnamed retail merchants for leaking the details, and Visa believes retail software could have been hacked into to steal the customer details, including PINs.

Retail banking software that is approved by the credit card companies is supposed to prevent such data being stored on retail networks.

But there are fears that some retailers have systems in place that do not block the collection of such details, meaning hackers have a ready-made way to clone customers’ cards. 

The Fujitsu software in question is not on Visa’s approved list, although that does not mean it does not meet industry standards.

Read article: Users' security responsibilities

Read more on IT risk management

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchCIO

SearchSecurity

SearchNetworking

SearchDataCenter

SearchDataManagement

Close