Bolting on Security at Stop & Shop / CIO, 9 March 2007
http://digbig.com/4rxqc
Sarah D. Scalet
"Supermarket chain CISO John Kirkwood speaks out about the latest evidence of why physical security and information security can’t be approached separately.
Stop & Shop is warning customers in Rhode Island and Massachusetts that it had a security breach, in which criminals went into at least six stores and tampered with Electronic Funds Transfer units. These are the point of sale devices, more commonly known as PIN pads, where credit and debit card customers swipe their cards and enter personal identification numbers.
John Kirkwood says that it took criminals, operating late at night when the store was thinly staffed, about half a minute to replace a legitimate check-out device with a phony one that, in addition to doing what the legit device was supposed to do, also captured card numbers and PINs for the criminals to retrieve later."