CVS Health Corp and Wal-Mart Canada Corp on Friday said that a data breach at a Canadian information technology vendor might have leaked credit card information from their online photo-processing Web sites, possibly compromising data of millions of users.
The two retailers have temporarily shut down their online photo-processing services and related mobile services, and are investigating the scope of the possible breach, the companies said in separate statements. Both retailers urged customers to check their credit card records for any suspicious activity.
CVS and Wal-Mart Canada said that a vendor based in Vancouver, British Columbia, called PNI Digital Media Inc hosts the sites and collects customers’ payment information. The vendor is owned by Staples Inc, which experienced an online attack of its own last year.
Neither retailer disclosed how many users might have been affected by the possible breach, which was first reported by Krebs on Security, a news site that focuses on online crime and other Internet security topics.
According to PNI’s investor relations page, the vendor also provides software to the online photo-processing services of a third retailer, Costco Wholesale Co.
Adam Levin, founder of the security firm IDT911, said the breaches highlighted the importance of more rigorously vetting information technology vendors at a time when companies outsource more and more of their operations. Vendors have often proved to be the weakest link, he said.
“Breaches have become a certainty in life, and everybody has got to step up their game,” he said. “Even if the problem stems from a vendor, the retailer’s reputation is harmed, and it ends up in the middle of lawsuits.”
Staples spokesman Kirk Saville said PNI was investigating a potential credit card data security issue.
CVS spokeswoman Erin Pensa said the retailer is working with PNI and credit card companies to investigate a possible breach.
ISSUES: Gogoro has been struggling with ballooning losses and was recently embroiled in alleged subsidy fraud, using Chinese-made components instead of locally made parts Gogoro Inc (睿能創意), the nation’s biggest electric scooter maker, yesterday said that its chairman and CEO Horace Luke (陸學森) has resigned amid chronic losses and probes into the company’s alleged involvement in subsidy fraud. The board of directors nominated Reuntex Group (潤泰集團) general counsel Tamon Tseng (曾夢達) as the company’s new chairman, Gogoro said in a statement. Ruentex is Gogoro’s biggest stakeholder. Gogoro Taiwan general manager Henry Chiang (姜家煒) is to serve as acting CEO during the interim period, the statement said. Luke’s departure came as a bombshell yesterday. As a company founder, he has played a key role in pushing for the
China has claimed a breakthrough in developing homegrown chipmaking equipment, an important step in overcoming US sanctions designed to thwart Beijing’s semiconductor goals. State-linked organizations are advised to use a new laser-based immersion lithography machine with a resolution of 65 nanometers or better, the Chinese Ministry of Industry and Information Technology (MIIT) said in an announcement this month. Although the note does not specify the supplier, the spec marks a significant step up from the previous most advanced indigenous equipment — developed by Shanghai Micro Electronics Equipment Group Co (SMEE, 上海微電子) — which stood at about 90 nanometers. MIIT’s claimed advances last
CROSS-STRAIT TENSIONS: The US company could switch orders from TSMC to alternative suppliers, but that would lower chip quality, CEO Jensen Huang said Nvidia Corp CEO Jensen Huang (黃仁勳), whose products have become the hottest commodity in the technology world, on Wednesday said that the scramble for a limited amount of supply has frustrated some customers and raised tensions. “The demand on it is so great, and everyone wants to be first and everyone wants to be most,” he told the audience at a Goldman Sachs Group Inc technology conference in San Francisco. “We probably have more emotional customers today. Deservedly so. It’s tense. We’re trying to do the best we can.” Huang’s company is experiencing strong demand for its latest generation of chips, called
GLOBAL ECONOMY: Policymakers have a choice of a small 25 basis-point cut or a bold cut of 50 basis points, which would help the labor market, but might reignite inflation The US Federal Reserve is gearing up to announce its first interest rate cut in more than four years on Wednesday, with policymakers expected to debate how big a move to make less than two months before the US presidential election. Senior officials at the US central bank including Fed Chairman Jerome Powell have in recent weeks indicated that a rate cut is coming this month, as inflation eases toward the bank’s long-term target of two percent, and the labor market continues to cool. The Fed, which has a dual mandate from the US Congress to act independently to ensure