Breach Hits Card Processor Global Payments
Global Payments Inc., which processes credit cards and debit cards for banks and merchants, has been hit by a security breach that has put some 50,000 cardholders at risk, according to people with knowledge of the situation.
Context & Ripple Effects
Global Payments sits in the middle of the card chain — it authorizes transactions between banks and merchants — so a breach at the processor tier touches every issuer whose cards routed through it rather than any single merchant. The report landed with unusual breadth on March 30, 2012: Krebs on Security's pickup, the Wall Street Journal, Bloomberg and others all carried it within hours, and Krebs reported MasterCard and Visa had already begun warning member issuers.
First-order effects
- Issuing banks face immediate reissuance costs and fraud exposure on roughly 50,000 compromised cardholders, with Visa and MasterCard acting as the warning channel to their member networks.
- Global Payments' acquiring-bank and merchant clients now have to answer card-brand compliance questions about a processor-level compromise, not a point-of-sale one.
Second-order effects
- Merchants and acquirers weighing processor concentration get a concrete argument for splitting volume across multiple processors, putting pricing pressure on the mid-tier processing market.
- Expect tighter PCI DSS scrutiny aimed upstream: card brands auditing processors directly rather than treating merchant-level certification as sufficient.
Third-order effects
- If breaches keep surfacing at the intermediary layer, the industry's compliance burden migrates from storefronts to processors, favoring larger players who can absorb audit costs — a structural push toward consolidation among payment processors.
The trend: Payment-card attackers are shifting targets downstream of merchants to shared infrastructure like processors, where one intrusion exposes many issuers at once.
Related: Global Payments Inc. · Agent-aware payment risk · Up to 1.5M credit card numbers stolen from Global Payments
Related Coverage
- MasterCard, VISA Warn of Processor Breach Krebs on Security · Brian Krebs
- Data Breach Sparks Worry Wall Street Journal
- Examiner Examiner · Michael Santo
- Bloomberg Bloomberg · Donal Griffin
- Pulse2 Technology and Social Media News Pulse2 Technology and Social Media News · Amit Chowdhry
- Zero Day Blog Zero Day Blog · Emil Protalinski
- Between the Lines Blog Between the Lines Blog · Rachel King
- @dannysullivan @dannysullivan · Danny Sullivan
- CNNMoney.com CNNMoney.com · Julianne
- TechSpot TechSpot · Matthew DeCarlo
- Naked Security Naked Security · Chester Wisniewski
- DailyTech DailyTech · Brandon Hill
- BGR BGR · Dan Graziano
- Computerworld Computerworld · Taylor Armerding
- Geek.com Geek.com · Ryan Whitwam
- Ars Technica Ars Technica · Dan Goodin
- VentureBeat VentureBeat · Meghan Kelly
- BetaNews BetaNews · Tim Conneally
- Gartner Gartner · Avivah Litan
- Forbes Forbes · Larry Magid
- BBC BBC
- The Raw Story The Raw Story · Stephen C. Webster
- Mashable! Mashable! · Alex Fitzpatrick
- SecurityWeek SecurityWeek · Mike Lennon
- eWeek eWeek · Jeffrey Burt
- InfoWorld InfoWorld · Neil McAllister
- The Register The Register · Iain Thomson
- internetretailer.com internetretailer.com · Kevin Woodward
- Forbes Forbes · Halah Touryalai
- ZDNet ZDNet · Emil Protalinski
- The Mac Security Blog The Mac Security Blog · Peter
- The Firewall The Firewall · Andy Greenberg
- Office of Inadequate Security Office of Inadequate Security
- Guardian Guardian
- Softpedia News Softpedia News
- Techland Techland · Martha C. White
- WebProNews WebProNews · Sean Patterson
- HotHardware.com News HotHardware.com News · Paul Lilly
- Global Payments Inc. Global Payments Inc.
- Network World Network World · Ellen Messmer
- MarketBeat MarketBeat · Steven Russolillo
- Lifehacker Lifehacker · Alan Henry
- Z Trek Z Trek · Alan Zeichick
- SlashGear SlashGear · Rue Liu
- CNET CNET · Roger Cheng
- Gizmodo Gizmodo · Kyle Wagner
- Reuters Reuters · Lauren Tara LaCapra
- SC Magazine SC Magazine · Dan Kaplan
- Wired Wired · Kim Zetter
- SeekingAlpha.com SeekingAlpha.com
- View article Examiner
- View article Bloomberg
- View article Pulse2 Technology …
- View article Zero Day Blog
- View article Between the Lines Blog
- View article @dannysullivan
- View article Zero Day Blog
- View article CNNMoney.com
- View article TechSpot
- View article Naked Security
- View article DailyTech
- View article BGR
- View article Computerworld
- View article Geek.com
- View article Ars Technica
- View article VentureBeat
- View article BetaNews
- View article Gartner
- View article Forbes
- View article BBC
- View article The Raw Story
- View article Mashable!
- View article SecurityWeek
- View article eWeek
- View article InfoWorld
- View article The Register
- View article internetretailer.com
- View article Forbes
- View article ZDNet
- View article The Mac Security Blog
- View article The Firewall
- View article Office of Inadequate Security
- View article Guardian
- View article Softpedia News
- View article Techland
- View article WebProNews
- View article HotHardware.com News
- View article Global Payments Inc.
- View article Network World
- View article MarketBeat
- View article Lifehacker
- View article Z Trek
- View article SlashGear
- View article CNET
- View article Gartner
- View article Gizmodo
- View article Reuters
- View article SC Magazine
- View article Wired
- View article SeekingAlpha.com
- View article SecurityWeek
- View article Between the Lines Blog