Dave and Busters lost credit card numbers. Hackers got them.
The story is the Hackers used sniffers to get the traffic from Dave and Busters restaurants that was heading to the main office in Dallas. The traffic contained credit card transactions. They did this for 5 months and sold the gathered information. The hackers were caught.
Great the hackers were caught. Now how about the company? I am thinking that Dave and Busters were routing their traffic through the internet and not encrypting it. If the traffic was encrypted, the hackers would not be able to sniff it. I think the greater crime is the company cutting corners and putting all it’s customers data at risk. This should be something companies can get in legal trouble for, setting up systems that are easily hacked.
Banks are not allowed to store the money in a card board box on the street because they have a fiduciary responsibility to keep the assets safe. But that is an obvious example and would be easily seen as a bad idea.
Companies that don’t keep the data safe are doing the exact same thing. They are putting all your information in a card board box on the street. The only difference is that you don’t know it. You can’t see the box but the people that would steel from this box do. So it is even worse than the bank example because they pretend that everything is in the safe and make you feel like it won’t be stollen but in the end they are doing nothing to stop it.
That is my rant for the day.
TheMadAdmin