Breach at Goodwill Vendor Lasted 18 Months

C&K Systems Inc., a third-party payment vendor blamed for a credit and debit card breach at more than 330 Goodwill locations nationwide, disclosed this week that the intrusion lasted more than 18 months and has impacted at least two other organizations.
http://krebsonsecurity.com/wp-content/uploads/2014/09/cksystems-285x69.pngOn July 21, 2014, this site broke the newsthat multiple banks were reporting indications that Goodwill Industries had suffered an apparent breach that led to the theft of customer credit and debit card data. Goodwill later confirmed that the breach impacted a portion of its stores, but blamed the incident on an unnamed “third-party vendor.”
Last week, KrebsOnSecurity obtained some internal talking points apparently sent by Goodwill to prepare its member organizations respond to any calls from the news media about the incident. Those talking points identified the breached third-party vendor as C&K Systems, a retail point-of-sale operator based in Murrells Inlet, S.C.
 
Krebs On Security/ full article here/ http://krebsonsecurity.com/2014/09/breach-at-goodwill-vendor-lasted-18-months/