CVS Probes Card Breach at Online Photo Unit

  • 17 July 2015
  • 3 replies
  • 709 views

Userlevel 7
Badge +54
17th July 2015
 
 
http://krebsonsecurity.com/wp-content/uploads/2015/07/cvsphoto-580x271.png
 
“We have been made aware that customer credit card information collected by the independent vendor who manages and hosts CVSPhoto.com may have been compromised,” CVS said in a statement that replaced the photo Web site’s normal homepage content. “As a precaution, as our investigation is underway we are temporarily shutting down access to online and related mobile photo services. We apologize for the inconvenience. Customer registrations related to online photo processing and CVSPhoto.com are completely separate from CVS.com and our pharmacies. Financial transactions on CVS.com and in-store are not affected.”
 
Full Article

3 replies

Userlevel 7
By: 18 Jul 2015 at 01:04, Iain Thomson
 
US drugstore* chain CVS has shut down its online photo printing service after it was compromised by hackers, who may have swiped people's bank card details.
"We have been made aware that customer credit card information collected by the independent vendor who manages and hosts CVSPhoto.com may have been compromised," CVS warned on Friday.
"As a precaution, as our investigation is underway we are temporarily shutting down access to online and related mobile photo services. We apologize for the inconvenience. Customers who provided credit card information for transactions on CVSPhoto.com are advised to check their credit card statements for any fraudulent or suspicious activity and to call their bank or financial institution to report anything of concern."
CVS stressed that its photo service was not connected to its main business of dispensing medicines and nostrums, so customers who have never used CVSPhoto.com will not be affected by the intrusion.
CVS's photo website is understood to be run by Canada-based PNI Digital Media, which also runs a similar service for Walmart. Last week, Walmart Canada suspended its photo services, admitting that customer credit card data had been stolen by hackers.
 
full article
Userlevel 7
Badge +54
July 18th 2015
 
And then there were more. Like Walmart Canada and CVS before it, Costco also suspended its photo center in the wake of a breach of third-party vendor PNI Digital Media:
http://www.databreaches.net/wp-content/uploads/Costco-547x400.png
 
Other clients of PNI Digital include “Samsung, ASDA (Wal-Mart UK), Hallmark UK, Blacks Photo, Loblaws, Fujifilm, Kodak, Fred Meyer, Marks & Spencer and more.” 
 
 
Full Article
Userlevel 7
Badge +54
By Investopedia | August 07, 2015
 
Warehouse membership club Costco (NASDAQ: COST) says it needs more time to secure its photo processing website.
 
Third-party photo service provider PNI Digital Media was hacked last month, causing retailers Costco, CVS Health, and Wal-Mart to take down their respective photo processing websites and post cautionary notes in their place.
 
Full Article

Reply