Brian Krebs announced this week that Goodwill Industries’ third-party payment vendor, C&K Systems, Inc., has been blamed for credit card and debit card breaches at more than 330 Goodwill Industries locations nationwide. According to Krebs, C&K commented on the breach by saying “the intrusion lasted more than 18 months and also impacted at least two …… Read Morevia Goodwill Payment Vendor Breached for 18 months Undetected – Are You Surprised? – The State of Security

In an era when third-party vendors such as C&K Systems can go 18 months without detecting a break-in, it’s reasonable to assume that the problem is much worse than it seems.”

It's negligent.

Cross posted from Google+