Case #7: Entertainment company loses credit cards
over wireless
Business
Problem:
This well known entertainment
company experienced a credit card breach through a wireless
access point. The company was self-attesting for PCI, and
thought they were secure. A staff position was eliminated
and a new team was formed.
Timeframe: Six months
Budget: $1.3M
Biggest Project
Risk: Once hackers breached the network and stole thousands
of credit cards, the entire environment was considered
"contaminated" as we were uncertain if servers have been
tampered, malware installed, and if any "back-door" processes
were installed.
Business Solution:
After the forensics team wrapped up the investigation, it was
time to rebuild the entire infrastructure to prevent this
situation from happening again. The entire network, POS
systems at every location, two data centers, and a new IT
Security infrastructure. A new PCI compliant POS software
system was installed to protect card holder data during
transmission for processing, new firewalls, switches, and
routers with IDS were purchased to harden the network.
Each location had 15 VLAN's to isolate other business processes
from credit card network traffic with additional VLAN's in each
data center to isolate credit card data at rest and processing
servers. All credit card traffic became encrypted between
POS's all the way to the credit card processor. The
network was setup to prepare for a future breach with network
sniffers and/or malware to intercept credit card traffic.
All credit card traffic and storage was encrypted from internal
and external threats. At each location, a new public Wi-Fi
connection existed for customers, but with no access to
corporate network. Employees at each location were
required to turn off Wi-Fi on a daily basis as a safeguard.
New monitoring software enabled IT Security to proactively
receive alerts from tampering, changes, and modifications from
systems.
Business Results: The project experienced many benefits that
actually improved the company in many ways. Many of the
new system components actually reduced work and resources, that
some of the team members left the company and their positions
were not back-filled. In addition, the company was more
streamlined, operated more efficiently by being able to deploy
new applications quicker and with greater ease, had better
business intelligence and reporting visibility into the POS
systems for revenue captures. All the logging and
monitoring tools used to protect the card holder environment
were also used to reduce downtime since system outages could be
identified much quicker and the logs provided details of the
difficult problems that shortened troubleshooting time.
Lastly, the company was experiencing undocumented changes that
would cause outages, but with file integrity being used,
unauthorized changes were being proactively detected and
prevented.
| |
2012 ConnectTech, LLC All rights reserved
Privacy Statement |
|
|
|
|
|