Feeds

Banks lob sueball at Trustwave, Target over breach

'Round-the-clock monitoring' spun out, missed vulnerabilities

Remote control for virtualized desktops

A group of banks has filed a class action lawsuit against Target over its recent data breach, and has named security company Trustwave as a co-defendant.

The late-2013 security breach resulted in at least 40 million customers' credit cards being compromised, after a Maryland contractor's systems provided a bridge into the retail giant's systems.

Trustwave is being targeted because, according to the banks, vulnerabilities in Target's systems remained “either undetected or ignored” in audits as recently as September 2013. These vulnerabilities included the fact that Target stored “credit and debit card data on its servers for six full days before hackers transmitted the data to a separate webserver outside of Target's network”.

Moreover, the filing claims, the Target breach went undetected for three weeks, even though the company “provided round-the-clock monitoring services to Target”.

It's against Target, however, that the most serious allegations are levelled. The class action led by Trustmark National Bank and Green Bank, say the retailer should not have allowed an outside contractor the access to its network that brought about the breach, and that it violated federal and state laws in storing the credit card data on its network.

Moreover, the lawsuit notes, repeated warnings and breaches stretching back to 2007 should have left Target in no doubt that vulnerabilities existed.

The suit cites America's Consumer Banking Association as estimating that the direct costs to banks have already reached $US172 million in re-issuing cards alone, with perhaps $US1 billion in the longer-term costs of fraudulent transactions resulting from the breach. ®

Intelligent flash storage arrays

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.