The Irish Times is reporting that the Data Protection Commisioner, Billy Hawkes, has confirmed that the compromised credit card data at LoyaltyBuild had been stored in an unencrypted form – together with the 3-digit CVV number from the backs of the cards.
When first reporting the breach last week, the company had claimed that all financial data was encrypted, and that CVV numbers were not retained.
The Times puts the total number of people affected at about 1.5m: 400,000 whose credit cards have been “seriously compromised”; 150,000 whose cards have been “potentially compromised”; and 1.1 million whose names address and phone numbers were taken.
Related articles
About the Author: Conn Ó Muíneacháin
Conn Ó Muíneacháin works at Blacknight, Ireland's largest provider of domains and hosting. He's an award-winning radio producer, podcaster and blogger. He's an engineer as well (not the award-winning kind).
Conn produces video for Blacknight and edits Technology.ie. Labhair Gaeilge leis!
RT @blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/4nSa7q7iTb
RT @blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/4nSa7q7iTb
@blacknight Data stored where? Loyaltybuild were acquired by US firm Affinion in 2008.
DPC confirms LoyaltyBuild credit card details were not encrypted http://t.co/9ZQi2Hq3cn (via technology.ie)
RT @blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/4nSa7q7iTb
“@blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/7dHBIxYNPz” <- Wow
RT @davebolger: “@blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/7dHBIxYNPz” <- Wow
RT @davebolger: “@blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/7dHBIxYNPz” <- Wow
«@mneylon «@blacknight Data Commisioner Confirms Credit Card Data Was Not Encrypted: http://t.co/4rzkDfIFKd»» whoopsie
Data Commisioner Confirms Credit Card Data Was Not Encrypted http://t.co/XuprbWxu2X
“@blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted http://t.co/PloBreJmum” Unbelievable.
RT @blacknight: Data Commisioner Confirms Credit Card Data Was Not Encrypted http://t.co/XuprbWxu2X
@vinnycoyne @blacknight Don’t we have an entire department set up to make sure this doesn’t happen? PCI Compliance no?