Unencrypted Payment Card Data Found on 63% of Merchant Networks

Nearly two-thirds of merchant computer systems store unencrypted payment card data in violation of the Payment Card Industry Data Security Standard (PCI DSS), according to scans of more than 475 merchant networks of all sizes by SecurityMetrics. This readable card data leaves merchants liable to fines and other penalties in case of card data compromise.

The presence of prohibited card information in 63 percent of merchant systems was discovered in beta testing of SecurityMetrics' just-released PANscan  product, a free patent-pending software tool that searches for unencrypted track 1, track 2 and primary account number (PAN) data on merchant machines to support PCI DSS compliance efforts.

The test findings indicate a large number of merchants use payment application software that does not conform to the Payment Application Data Security Standard (PA-DSS), fail to configure their payment applications properly, neglect to erase old data when new payment applications are purchased, and/or fail to train their employees in proper handling and storage of card data.

"Improper storage of payment card information puts cardholder data at risk. Our testing suggests that the problem remains surprisingly widespread even with increasing industry emphasis on the need for compliance with PCI DSS regulations," said SecurityMetrics CEO Brad Caldwell. "Proactively looking for unprotected data with a tool like PANscan can help close this security gap and potentially thwart future theft incidents."
 

Featured

New Products

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.