Grocery Chain Data Breach Offers Lessons for CIOs
The attack represents a "new and sophisticated" attack on computer networks, the company told the Massachusetts attorney general and the state's consumer-affairs agency.
The Hannaford breach is notable because -- unlike the notorious breach of The TJX Companies in 2006 -- the company did not store the customer data. Rather, the hackers captured the stream of data as card information was sent to banks for verification.
Inside Job?
The scheme may have compromised 4.2 million cards used at the stores between Dec. 7 and March 10, the company said. About 2,000 cases of fraud have been linked to the Hannaford breach.
The Hannaford breach appears to have been a professional, sophisticated attack, said Andrew Storms, director of security operations at nCircle Network Security, in an e-mail. "The means by which the malware was introduced and the data extracted only furthers the speculation that Hannaford was victim to a sophisticated attack," he said. "We have further information in the last few days that indicate this may have been an inside job, which seems to nicely explain some of the bigger questions."
The questions include how was the malware introduced and why was the attack so successful? "For example, it's unlikely that an outsider would have had such an incredibly high success rate at distributing the correct malware to all the correct systems," Storms said.
Furthermore, writing sophisticated software to intercept credit-card information at the time of a card swipe means "an attacker would have needed to have some prototype systems in-hand first to...
Permalink Comments off