63% of businesses don't encrypt credit cards
Posted on 17 July 2014.
In its third study on unencrypted card data, SecurityMetrics found that 63.86% of businesses store the unencrypted 16-digit sequence on the front of credit cards, also known as the Primary Account Number (PAN). Furthermore, 7% of businesses store the magnetic stripe data on the back of credit cards.


"Because of its value on the black market, unencrypted card data, is essentially just a $50 bill lying on the sidewalk, waiting for a hacker to pick it up," said SecurityMetrics Director of Forensic Investigations, David Ellis. "Unencrypted card data is the 'low hanging fruit' that is ripe for easy picking, and it's what attackers first look for when they hack a business."

During its 2014 study, PANscan scanned 145,144 gigs of data on 2,590 computers and found:
  • A total of 87,206,203 unencrypted payment cards
  • 63.86% of businesses store unencrypted PAN data
  • 7.37% of businesses store full magnetic stripe data, including PIN, CVV, service code, expiration date, cardholder name, and PAN.
Since its introduction, PANscan has found more than 780 million unencrypted card numbers on business networks. That's more than 2.5 cards for every one person in the United States.

"Unencrypted card data can easily occur at both small and large retail locations," said Gary Glover, Director of Security Assessment. "It may accidentally be saved on point of sale terminals, office workstations, hard drives, etc. due to misconfigured software, improper file removal, or restored backups."





Spotlight

(IN)SECURE Magazine issue 43 released!

Posted on 16 September 2014.  |  (IN)SECURE Magazine is a free digital security publication discussing some of the hottest information security topics. This issue covers web application security, mobile hacking, certification, Black Hat, and much more.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Wed, Sep 17th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //