Global Payment Case Study

942 Words2 Pages

Global Payments Inc is payment-processing service that serves as a middleman between the merchant and the bank to make sure that the transaction goes through. In March of 2012, Global Payments recognized a data breach in its security system after a blogger displayed a hack in the company. Paul Garcia, CEO at Global Payments at the time of the breach reassured the public that the breach was small and that it was intercept internally. A few times after the expansion of the news, three separate card-issuing institutions came forward with proof that Visa and MasterCard was confirming the breach, and that it occurred earlier that year between January 21 and February 25. After investigation, in April, Visa reissued a statement claiming that the …show more content…

Global therefore dug more into the case and found out that about 1.5million accounts were exposed but the media claimed that there were up to 7millions accounts exposed by the breach. This media claimed caused global, in June, to modify its claim and recognize that there were more accounts evolved but didn’t mention how many.
As a result of this breach, Visa removed Global from its list of approved service providers therefore, Global payment had to revalidate its PCI DSS compliance. Visa and MasterCard also made public announcement about the breach that occurred at Global. Even though Global is still able to process visa cards, the negative publicity could have cost other partners to drop the company as well. Global Payment breach brought a lot of attention and incited the security sector to issue a statement. Joe Levy, Chief Technology Officer for the security intelligence and analytics company Solera Networks, said, "It would not be surprising if the investigation slowly reveals that the breach involved techniques such as web application exploitation, maneuvering from a compromised public system into the internal systems …show more content…

Global payment breach allegedly traces its root according to some research to the access of Track 1 and Track 2. Both track 1 and 2 has a separate purpose, but both contain enough information to clone a credit card. To get access to Track 1 and 2 criminals must have needed a password, therefore we can assume Global Payment had weak passwords, which made the breach easier, or an insider did the breach. Processors are not to store any magnetic strip data, which is Track 1 and Track 2 data as dictated by the payment networks. PCI also indicates this, but the networks have additional rules on how these companies are to operate when dealing on their network. If Global payment indicated that track 2 data was stolen, then we can assume that either they were storing data that they were not supposed too or the data compromised was being taken at real-time, meaning that other data and not just track 2. This means that the authorization message may have been compromised, which contains more information than just the credit card number and expiration date, such as security authentication

More about Global Payment Case Study

Open Document