Cardholder Data Compromise

Occurrence of data compromise incidents continue to increase. With publicity and media coverage, incidents are increasing public and consumer awareness. Even with increased awareness and merchant education, malicious individuals continue to attempt to gain unathorized access into merchant payment systems in order to exploit cardholder data.

What is a data compromise?
A data compromise is a deliberate electronic attack on the communications or information processing systems exposing cardholder account information to third parties, and placing cardholders at risk of fraudulent use. These attacks are initiated with malicious intent and often result in damage or disruption to the entire payment system.

Reporting an Incident
When a merchant detects an unauthorized network intrusion or any type of loss of cardholder data, it is imperative to report the specifics of the event to the acquirer.

Loss of cardholder data includes but is not limited to: theft of property which included cardholder data, stolen laptop, missing or stolen reports thtat may contain cardholder data, an employee unlawfully taking cardholder data, or any other means resulting in lost or stolen cardholder data.

To report an incident, please click here.