KrebsonSecurity reports on a potential data breach affecting Michaels Stores. The U.S. Secret Service has confirmed it is investigating the incident. A company statement cites “possible fraudulent activity on some U.S. payment cards … suggesting that the company may have experienced a data security attack.” With recent breaches hitting Target and Neiman Marcus, a column in Computerworld asks whether the Payment Card Industry Data Security Standard (PCI DSS) is ineffective. A recent letter from Neiman Marcus CIO Michael Kingston to Sen. Richard Blumenthal (D-CT) suggests although the company complied with PCI DSS, it brought limited security against a massive intrusion. In a Q&A with Kroll’s Timothy Ryan, USA Today explores how retailers rationalize not disclosing breaches or delaying breach notification to consumers.
Full Story