Verifone Investigating Data Breach

Company confirms cyber attempt was limited to controllers at about 24 convenience stores.

March 09, 2017

SAN JOSE, Calif. – Verifone is investigating a data breach of its internal computer networks, reports PYMNTS.com, adding that the attack was limited to Verifone’s corporate network and had no impact on its payments services network.

“In January 2017, Verifone’s information security team saw evidence of a limited cyber intrusion into our corporate network,” Verifone spokesman Andy Payment told KrebsOnSecurity. “Our payment services network was not impacted. We immediately began work to determine the type of information targeted and executed appropriate measures in response. We believe today that due to our immediate response, the potential for misuse of information is limited.”

After Krebs’ initial story ran on March 7, Verifone sent a follow-up to the situation: “According to the forensic information to-date, the cyber attempt was limited to controllers at approximately two dozen gas stations (convenience stores), and occurred over a short time frame. We believe that no other merchants were targeted and the integrity of our networks and merchants’ payment terminals remain secure and fully operational.”

In a statement emailed to Digital Transactions News, Verifone said the incident was a “very limited cyber intrusion” that was confined to the 24 convenience stores over a short time. “No other merchants were targeted and the integrity of our payment networks and Verifone’s payment terminals remained secure and fully operational,” Verifone stated.

Verifone also notified the card brands. “It is also worth noting that there have been no adverse events or misuse of any data resulting from this incident,” the company said in a statement.

Advertisement
Advertisement
Advertisement