Included in the breach is cardholder name, payment card number, card expiration date and the card security code
The unauthorized party was able to access payment card information for some hotel reservations at Rosewood Hotel Group affected properties, including cardholder name, payment card number, card expiration date, and potentially card security code
Fortunately the payments industry has put a number of measures in place to help restrict damage such as 3D Secure, Card Security Code
and Address Verification, which all require customers to enter additional information at the point of sale, during web transactions.
This past week, I received a dead-tree, snail mail letter from this company that began with "Regrettably" and went on to explain that the company "was the victim of an illegal data security attack by sophisticated criminals" who "viewed or obtained" information "including your first and last name, credit card number, credit card security code
and expiration date, billing address, e-mail address, and phone number.
A dishonest employee may copy the card number and the three or four-digit card security code
and then use this information to make purchases online or to commit white card fraud (using cloned cards) in countries where the EMV standard has not been introduced," said Andrew Rochford, business solutions consultant at ACI Worldwide.
They use a small keypad to secretly transcribe the three or four-digit Card Security Code
on your plastic.
Always ask for the last 3 digits on the reverse of the card, known as the Card Security Code
(or 4 printed--not raised--on the front of American Express) as well as the numbers on the front as these are not found on receipts.