Links in “Cybersecurity/Data Breaches”

In light of yet another retailer security breach, this time at Home Depot, ICBA calls for the costs of data breaches to be borne by the party at fault for the breach and for all participants in the payment system to be subject to Gramm-Leach-Bliley Act–like security standards. [9/10/14]

Home Depot has confirmed that its data systems were breached in April, but claims that no debit PINs were compromised. Still, the retail giant is recommending that consumers who shopped in any of its retail stores in the U.S. and Canada watch their accounts for signs of unauthorized transactions. [9/9/14]

The possible breach at Home Depot may be bigger than the Target breach. Here's what some credit unions are doing to proactively inform members about what the possible breach may mean. [9/5/14]

Criminals accessed 10% of all Goodwill stores through malware placed on a third-party vendor's system. The breach lasted as long as six months at some stores. [9/4/14]

That’s "advanced persistent threats," like the one that hit JPMorgan Chase. APTs differ from ordinary hacks because the hackers start with a specific target and stick with it, sometimes for months, until they’re able to penetrate it or until they’re called off by their masters. [9/3/14]

Home Depot appears to be the latest target of a security breach. Credit card info was offered for sale on an underground site that traffics in stolen financial information. The data were labeled "American Sanctions," which suggests it was intended as retribution for sanctions against Russia. [9/3/14]

The attack, which was discovered only recently, had been going on since June, despite JPMorgan being considered by some to be the Fort Knox of digital security. [9/2/14]

Yes, you read that correctly! Learn about the primary mistakes that credit unions make in trying to protect themselves against cyber criminals. [8/29/14]

A massive phishing attack is behind the recent data breach at JPMorgan and 10 other banks. A communication that appeared to be from the bank asked customers to click on a link that triggered a barrage of malware intended to corrupt Java and Flash and to install a malware named Dyre, a banking Trojan, designed to steal banking credentials. [8/29/14]

Due to recent data breaches, legislators are evaluating reasonable expectations for effected institutions in protecting consumers' privacy and financial security. A key point of discussion has been whether free credit monitoring for effected consumers should be required of financial institutions following a data breach. Though it is currently up to the discretion of the institution, that may not be the case for long. [8/29/14]