ALEXANDRIA, Va. – In 2015, a statewide sweep of 7,571 gas stations in Florida revealed 103 skimmer devices, according to the state Department of Agriculture. As recently as Sept. 3, the front page of the Wall Street Journal proclaimed, “Credit-Card Fraudsters Pump Gas Stations for Profit; Payment-card companies and gas station operators combat a wave of theft.”
Why are fuel dispensers such an attractive target? One word: Opportunity.
The average retail fueling site has eight pumps, typically unattended, that represent several options for hackers and thieves as possible avenues for attack. Customers want to make a quick transaction, so may not notice a skimming device or hidden camera. Gas station attendants are frequently preoccupied with inside customers and not paying attention to fraudulent cards being used to fill up “bladder tanks.” What’s more, branded gas stations may not be under that brand’s full jurisdiction, as they are often operated by licensed independent retailers. Therefore, proper policies protecting against risk may not be upheld according to the brand’s standards.
A strong security program gives stores a fighting chance against fraudsters and data thieves. And at the heart of any effective security program is a detailed and comprehensive asset management program. Knowing who, what and where assets are enables the retailer to support the definition, design and deployment of security controls (not to mention, it’s required for compliance with the Payment Card Industry Data Security Standard).
Retailers should attend the upcoming Conexxus webinar to learn more about curbing fraud. Led by Olivia Rose Jenkins, director of security consulting services at ControlScan, the webinar will cover:
- Common threats and vulnerabilities for fuel retailers;
- What constitutes an “asset” and key data points retailers should be tracking;
- How to obtain the data needed for effective asset management;
- When to turn to a third-party assessment management system; and
- How to avoid the common missteps and issues seen with asset management.
Register here to participate in the webinar on Thursday, Sept. 24, 12:00 pm – 1:00 pm EST.