Credit card scam: Half a million Credit Card numbers breached in Australian Point-of-Sale Hack

Australian Police are investigating a breach of half a million credit card numbers by the same gang that struck the Subway restaurant chain in the United States.

The credit card hacking intrusion occurred at an unidentified merchant in Australia and is being blamed on Eastern European hackers who installed keystroke-logging software on point-of-sale terminals (POS) and siphoned card data from the terminals remotely, according to SC Magazine.

The company’s network used default passwords and stored unsecured transactional data. The gang allegedly used an unsecured Microsoft Remote Desktop Protocol (RDP) connection to transmit the data.

"The network was setup by some local suppliers who didn’t understand IT security,” Det. Sup. Marden told the magazine. “It was a disaster waiting to happen.”

The hackers are believed to be members of the same Romanian group that was responsible for hacking 150 Subway sandwich shops and other unnamed retailers in the U.S.

Last December, four Romanian nationals – Adrian-Tiberiu Oprea, 27; Iulian Dolan, 27; Cezar Iulian Butu, 26; and Florin Radu, 23 — were charged in the District of New Hampshire with four counts related to those hacks, including conspiracy to commit computer fraud, wire fraud and access device fraud. The indictment also referred to two unindicted co-conspirators who used the online nicknames “tonymontanamiami” and “marcos_grande69.”

Few details have been released about the credit card hack in Australia, but in the Subway case, the hackers compromised the credit-card data of more than 80,000 customers and used the data to make millions of dollars of unauthorized purchases, according to authorities.

From 2008 until May 2011, they allegedly breached more than 200 POS systems in order to install a keystroke logger and other sniffing software that would steal customer credit, debit and gift-card numbers. They also placed backdoors on the systems to provide ongoing access.

POS systems generally consist of a card scanner at a checkout register where customers scan their cards and type in a PIN or provide a signature, as well as a computer system for transferring the data to a card processor for verification and approval.

The indictment didn’t identify the POS system used by Subway, nor does the news from Australia indicate the brand of terminal attacked in that breach, but Subway announced in January 2009 that it was deploying the Torex Quick Service POS in all of its 30,000 restaurants.

The Subway case shared similarities to what occurred to seven U.S. restaurants that sued the maker of a POS in 2009 for failing to secure the product from a Romanian hacker who breached their systems.

Credit card fees: Visa & Mastercard deal may not help stores recover charge fees & costs

What appeared to be a clean 'n' sweet credit card fees deal may have opened a can of worms, in some States, and with convenience stores [low value transactions.]

Stores and e-tailers may not find it easier to charge shoppers fees for paying by credit card as a result of a $7.25 billion class action settlement with Visa and MasterCard, which might delay or sabotage its approval, an analyst said on Monday. And larger retailers are saying that they don't want to make extra charges.

The Proposed Visa Card and MasterCard settlement

The proposed settlement between retailers and the two biggest credit card companies would resolve class action stores' claim that Visa and MasterCard conspired with major banks to fix swipe fees, the amount paid to process debit and credit card payments.

In addition to a $6.05 billion payment and temporary $1.2 billion swipe-fee reduction, the deal would also allow stores to start charging so-called checkout fees to customers who pay with MasterCard or Visa credit and debit cards, to defray their costs From Visa, MasterCard and Banks for using credit cards.

But retailers might not in reality get much help from the deal in offsetting the credit card swipe fees by charging customers more.

The settlement's much-touted credit card surcharging provisions actually have no real usefulness to merchants.
Because buried in the fine print of the agreement are provisions that undercut the stated intent of the settlement.

For instance, if retailers force customers to pay more for using Visa or MasterCard, they essentially must charge consumers more when they pay using other credit card networks, such as American Express, according to Bouregois' analysis of the proposed settlement.[not part of the claim or settlement]

But American Express prohibits merchants from implementing policies that discriminate against its cards, like discounts designed to steer customers to different forms of payment. Although this may be unlawful I feel.

The credit card settlement is also subject to approval by a federal judge.

The surcharge rules will also not apply in the 10 states that prohibit that practice, including Texas, California and New York.

Credit Cards increase sales

This could undermine the settlement if merchants voice their objections to this provision during fairness hearings prior to the court's final approval.
Some stores have said they will not impose extra fees for paying with plastic, even if they can.
One of the largest U.S. retailers, Target Corp., issued a statement Friday saying it did not intend to impose checkout fees, and calling it "bad for both retailers and consumers."

The National Association of Convenience Stores believes the deal does not address convenience stores merchants long-standing concerns over how Visa and MasterCard set credit card swipe-fee rates.

Credit Cards Fees: Retailers have a few options

The settlement would give retailers a couple of different options should they choose to pursue checkout fees.

For instance, stores could choose not to assess the fees, or if they did, they could re-examine their agreements with competing credit card issuers or even drop those other cards altogether, he said.

The settlement agreement should now give freedom to merchants to make those choices that they think are in the best interest of their business and their customers.

Because the value merchants get from MasterCard acceptance is far in excess of the actual cost of acceptance, so merchants would not have to impose credit card use checkout fees, as the costs have been taken care of.
Source: Mr Mortgage

Retailers & e-tailers win credit card swipe fee war against Visa, Mastercard & Banks

Entrepreneur Mitch Goldstone lead fight with credit card giants Visa and MasterCard for 7 years to help reach a $7.2-billion settlement over transaction fees.

Mitch Goldstone of ScanMyPhotos was a lead plaintiff in antitrust litigation against Visa, MasterCard and the banks that issue their cards over credit card "swipe fee." 

Visa, MasterCard to pay $6 billion to settle retailers' lawsuit

Most small-business owners regarded the rising fees they paid to Visa and MasterCard as an unavoidable cost of doing business. Not so photo processor Mitch Goldstone. He saw it as a ripoff.

Contending that a price-fixing cartel was exploiting him and other entrepreneurs, Goldstone went to war in media interviews, blog posts and as a lead plaintiff in a giant class-action lawsuit, comparing the payment processors to drug pushers and to the railroads that profited at the expense of farmers.

What Goldstone calls his "Erin Brockovich moment" arrived with last week's $7.2-billion settlement with Visa, MasterCard and the banks that issue their cards after seven years of antitrust battles in federal court in Brooklyn, N.Y. The agreement will shift power to sellers of goods and services and could transform how — and whether — millions of Americans use their credit cards.

The agreement also allows Retailers to charge customers to recover costs.

Now Visa and MasterCard have agreed for the first time to bargain with groups of retailers over credit card fees, so small businesses can team up to gain leverage.
The agreement also allows merchants for the first time to charge customers extra for using credit cards, so long as the charges reflect the actual cost and are broken out clearly for consumers to see.

That would drag the processing charges — formally known as interchange fees, colloquially called credit card swipe fees — into the light, so consumers can finally see how costly they are to the businesses they patronize.

"If you ask customers what's an interchange fee, they'll say it has something to do with a freeway," Goldstone said. "And millions and millions of merchants just accepted it as a cost of doing business."

The interchange fees are complex as well as arcane. The latest version of MasterCard's online rate summary, current as of April, runs 131 pages.

The Federal Reserve last year cut debit-card fees from 44 cents to 21 cents per transaction. But credit-card fees run much higher, especially for popular rewards cards, averaging 2% of a purchase price and reaching 5% for minor purchases from small retailers — a cost most Americans have been blissfully unaware of.

Goldstone says the ability to bargain collectively will gradually bring down card costs for retailers, who in a competitive environment will pass along the savings to customers across the country.

Imposing credit card surcharges is trickier. For one thing, the practice is banned in 10 states including California, although the Golden State makes an exception for gas stations.

A recent California Supreme Court decision that federal law preempts state laws dealing with credit cards means that courts could nullify the state ban on surcharges.

Many retailers say credit cards are king these days, despite efforts by some jewelers, spa owners, movers and even dentists to entice shoppers to pay with cash.

Goldstone thinks few merchants will impose surcharges but says the threat will force the card companies to lower their fees. "The balance of power is going to shift very fast," he said.

That would be a distinct contrast with the situation in 2005, when digitizing old snapshots became so cheap that his 30 Minute Photos shop slashed its charge to scan a picture from $5 to 15 cents.

Technology also was transforming credit card companies, with electronic transfers replacing manual imprint machines and carbon-copy receipts — yet the rates Goldstone paid the payment processors were rising.

"I kept asking Visa and MasterCard if they'd charge me less," he said, "but they wouldn't even call me back to discuss it."

Now that the interchange war is over, Goldstone says he will devote time to nonprofits, creating a foundation that will monitor the credit card industry and a group that will lobby small businesses to support President Obama.