WASHINGTON — The Department of Homeland Security estimates that over 1,000 U.S. businesses have been infiltrated by malicious point-of-sale software, significantly broadening the scope of known cyber attacks that hit Target and Neiman Marcus stores in the past year and thrust the issue into the national spotlight, spawning several Congressional probes and hearings.
In an advisory released Friday, the federal agency notified companies about the expanded scope of data security breaches and urged them to “proactively check for possible point-of-sale malware infections.”
Seven POS systems providers or vendors have confirmed security breaches, which have affected “multiple” clients, the agency said.
“Reporting continues on additional compromised locations, involving private sector entities of all sizes, and the Secret Service currently estimates that over 1,000 businesses are affected,” said the agency.
The agency said one particular family of malware, dubbed “Backoff,” was detected in October 2013 but was not recognized by antivirus software solutions until this month, and has “likely infected many victims who are unaware that they have been compromised.”
The National Cybersecurity and Communications Integration Center and U.S. Secret Service issued an advisory on July 31 regarding “Backoff” POS malware that officials said was “exploiting” business payment systems remotely and stealing consumer payment data.
Federal officials said the malware has the ability to scrape memory for track data, log keystrokes, command and control communication and insert “malicious stub” into explorer.exe files.
The agency recommended that companies contact their IT teams, antivirus vendors, managed service providers and POS system vendors to assess whether their systems have been comprised or are vulnerable. The Secret Service is currently contacting impacted businesses, and local offices are fielding calls from victims of the malware.
The massive data security breach at Target Corp. during the holiday shopping season last year, followed by another publicized breach in early January at Neiman Marcus Group Ltd. LLC has raised alarm in the industry, spurring more scrutiny from federal officials and lawmakers on Capitol Hill and industry collaboration and initiatives to protect consumers’ personal and financial data and combat the security breaches and cyber crimes.
Target initially said 40 million consumers who shopped in its U.S. stores between Black Friday and Dec. 15 may have had information stolen from their credit or debit cards. The retailer subsequently learned and disclosed in January that certain consumer data separate from the credit card information was also stolen, and raised the number of potentially affected customers to 100 million. Neiman Marcus disclosed in January that 1.1 million payment cards may have been compromised in its data security breach.
The unprecedented data breach at Target was considered a factor that contributed to the early exit of Gregg Steinhafel as chairman, president and chief executive officer in May. The data security breach is believed to have reduced the level of holiday gift shopping at the chain during a critical business period.
The breach also prompted Target to step up initiatives on security enhancement. The retailer, which has been working toward adopting chip and PIN technology for the last decade, said it has accelerated its $100 million investment to put the technology in place by 2015. Target is working with MasterCard on a new initiative to enable Target-branded credit and debit cards with MasterCard’s chip and PIN solution. The retailers is moving its Red card portfolio to the new technology and installing supporting software and next-generation payment devices in its stores. The new payment terminals will be in all 1,797 U.S. stores by September, six months ahead of schedule.
“What he has done at Vuitton is really exceptional,” said @gameofthrones’ actress Gwendoline Christie on @mrkimjones’ final show for @louisvuitton. “He has rebooted luxury in terms of making it commercial, viable and contemporary. And most importantly artistic. He has never compromised his artistic vision for the sake of commodity.” (📷: @zefashioninsider)
After seeing a demand for men’s wear from its customers, British contemporary women’s wear label @ariesarise has added a men’s wear component and will launch a unisex collection with @mrporterlive. The 20-piece collection includes jackets, denim, logo T-shirts and more with deconstructed ‘90s vibes. Set to launch on January 18, you can shop the pieces on Aries’ website and on mrporter.com. #wwdfashion
“And so spending so much time with a character who thinks like that, inevitability you try and analyze yourself and go back and think about your own demons and dark chapters that you had in your life,” says @thedanielbruhl of his role in TNT’s “The Alienist.” The show, set in the Gilded Age of New York, also stars Dakota Fanning and Luke Evans. Head to WWD.com to read about how 39-year-old Brühl prepared for the role and why he thinks the show is so relevant to today #wwdeye ( 📷: @Eriktanner)
Now that Celine Dion’s collection has topped $10 million in sales, the pop superstar, fashion icon and newly-minted industry player is eyeing growth in Asia. Read the full report by @tiffanyap, link in bio. #wwdnews #celinedion
“My personal philosophy to beauty is paying attention to oneself. I love to be outdoors, lots of fresh air, trying to take care of yourself as best you can. I always notice that comes through,” says Felicity Jones, the global face of @shiseido-owned @cledepeaubeauteus, which launches today. Head to WWD.com to read more about the actress’ love for beauty and how she prepared for her new role in “The Basis of Sex,” playing the young Ruth Bader Ginsburg. #wwdbeauty (📷: @dandoperalski)
Among the familiar faces at @off____white’s show was a surprise figure: Japanese artist @takashipom, pictured here on Wednesday morning. Other show-goers included @jerrylorenzo, who spoke about his upcoming project: a @nike collaboration for back to school, with designs inspired by his childhood on the West Coast. Sitting in the front row were Future, Don Crawley, @miguel and more. See the rest of the photos on WWD.com #wwdeye (📷: Stephane Feugere)
According to @laurentsai, former “Terrace House: Aloha State” cast member, she didn’t know she was auditioning for the Japanese version of “Real World.” “I was telling a couple of my friends and someone’s like, ‘That sounds a lot like Terrace House.’ I was like, ’No it can’t be.’” Turns out, it was. But Tsai isn’t just a reality star — she’s an illustrator who has worked with Starbucks Japan and most recently, she’s dipping her toes into the fashion world. Head to WWD.com to read about her time on the show, modeling and her art. #wwdeye (📷: @danieldorsa)
More changes are coming to New York Fashion Week: Beginning with the spring 2019 collection, @alexanderwangny will move his New York show to June from September, adopting a biannual schedule with collections shown in June and December. Additionally, the @cfda is planning for an official summer/winter fashion season taking place as soon as June and December 2018. Read more about the upcoming changes on WWD.com. #wwdnews #wwdfashion (📷: @slovekinpics)