For the first time, breached processor Global Payments disclosed on Tuesday that a number of card brands have removed the company from their approved list of Payment Card Industry (PCI)-compliant service providers.
However, the US-based firm continues to process transactions for all of the major card brands as it seeks rejoin those lists, it said in an update.
Global Payments stands by its initial estimate that fewer than 1.5 million cards were impacted by the breach. However, it declined to provide any further details or a timeline of the attack.
"We identified and self-reported the incident in early March, and we will continue to provide information to the appropriate parties as revealed by the investigation," the company said.
A Visa spokesman on Wednesday said it has asked Global Payments to re-validate its compliance to PCI by using a qualified security assessor, or QSA. Retailers that use the company's services will not be liable for penalties during that time.
A MasterCard spokesman did not respond to a request for comment.
This article originally appeared at scmagazineus.com
Copyright © SC Magazine, US edition
Issue: 335 | January/February 2015
Access CRN's extensive online resources including; email bulletins, community discussions and unique online news.
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED GOES EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can log on to the CRN website or start posting comments on articles.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain '@crn.com.au' to your white-listed senders.