Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
Security Communications Privacy Software

Best Buy Warns of Data Breach (usatoday.com) 25

Best Buy, along with Delta Air Lines and Sears, says that [24]7.ai, a company that provides the technology backing its chat services, was hacked between September 27 and October 12, potentially jeopardizing the personal payment details of "a number of Best Buy customers." The electronics company said in a statement that "as best we can tell, only a small fraction of our overall online customer population could have been caught up in this... incident whether or not they used the chat function." They will reach out to customers who were impacted.
This discussion has been archived. No new comments can be posted.

Best Buy Warns of Data Breach

Comments Filter:
  • by silverkniveshotmail. ( 713965 ) on Friday April 06, 2018 @06:29PM (#56395305) Journal
    I'm not surprised or outraged anymore. On the bright side, credit monitoring is basically free for everyone forever.
  • by Anonymous Coward

    For in-store purchase, CASH!!!

    • by tlhIngan ( 30335 )

      For in-store purchase, CASH!!!

      Except it wasn't in-store purchases that were hacked. It was online purchases - the chat software was a SaaS package Best Buy, Sears, etc. all used that got hacked.

      It's not about Point of Sale machines being hacked (this time), but how one company has software used by lots of other companies got hacked. Closest example would be bad ads being served up, except instead of the site hosting the ad, it was a piece of utility software instead.

  • by mschaffer ( 97223 ) on Friday April 06, 2018 @07:55PM (#56395657)

    Let me know when someone hasn't been breached.
    The real news is that nothing important is being done about it.
    Nobody gets punished. Nothing happens except waiting for the next one.

    • Hmm...no. I know for a fact that they're going to get fined by PCI. PCI-DSS is in many ways like HIPAA: It gives vague details about how your network and servers should be secured, (for example it says networks should be "segmented" with no clarification at all if vlans suffice) and basically "do your best". If payment details get leaked, then guess what? You didn't do enough to secure your network, so have a fine.

      Though PCI also has a reputation of being in the business of fining anyone who processes credi

  • by srichard25 ( 221590 ) on Friday April 06, 2018 @08:06PM (#56395697)

    Why would technology backing chat need any access to payment information?

    • by tlhIngan ( 30335 )

      Why would technology backing chat need any access to payment information?

      The problem was the chat software was hacked. So when you try to check out and enter your payment information, that little box that pops up asking if you need support then snarfs the data from the web page.

      Basically, all these companies use a SaaS package from a company who was breached. That breach caused the software used to get the ability to steal information. It's less about Best Buy et al. storing the payment information, and mor

  • Donâ(TM)t ever tell your personal information to anyone. Thatâ(TM)s the closest way you can come to protecting it. Itâ(TM)s just the reality today, and itâ(TM)s why we canâ(TM)t have nice things. Itâ(TM)s too late for me, as everyone on the dark web knows everything about me... I may have to give up all my stuff, and learn how to speak Amish.
    • I may have to give up all my stuff, and learn how to speak Amish.

      It's similar to English Canadian. Now let's get you a name - Caleb has a nice ring.

      But it isn't all bad, if google searches for "Amish Porn" are any indication.

  • Geek Squad! [npr.org]

    The FBI paid Best Buy Geek Squad employees as informants, rewarding them for flagging indecent material when people brought their computers in for repair.

  • "as best we can tell, only a small fraction of our overall online customer population could have been caught up in this... incident"

    Lol, "as best we can tell"

    TRANSLATION: "They got all your data, every bit of it, but we're going to reveal this in a series of press releases in order to desensitize you to the scope of the loss."

Some people manage by the book, even though they don't know who wrote the book or even what book.

Working...