A handful of Australian banks have cancelled more than 10,000 credit cards after discovering fraudulent charges resulting from a merchant data breach. Commonwealth Bank cancelled 8,000 cards and alerted the breached merchant and its acquiring bank, the card issuers—Visa and MasterCard—and the affected customers, reports ITNews. A spokesperson has said the compromise occurred at "an Australian merchant acquired by another bank." Under PCI-DSS, Visa and MasterCard may issue fines to the acquiring bank, depending on the merchant's level of compliance with the rules at the time of the breach. The federal privacy commissioner is aware of the breach, but according to the report, the office has not said whether it is investigating.
Full Story