EasyJet cyber-attack on 12:00 - May 20 with 1541 views | TacticalR | 'Stolen credit card data included the three digital security code - known as the CVV number - on the back of the card itself.' Why on earth did they store the CVV number? The whole point of that number is that the purchaser needs to enter it every time, even if the card number is stored by Easyjet. |  |
|  |
EasyJet cyber-attack on 15:42 - May 21 with 1354 views | A40Bosh |
EasyJet cyber-attack on 12:00 - May 20 by TacticalR | 'Stolen credit card data included the three digital security code - known as the CVV number - on the back of the card itself.' Why on earth did they store the CVV number? The whole point of that number is that the purchaser needs to enter it every time, even if the card number is stored by Easyjet. |
I would be furious if a company as large as EasyJet does not have a PCI PA-DSS compliant way of storing tokenised card numbers in their database and have been storing the CVV. It's one of the fundamental components of industry compliance, no card numbers in the clear and no storing CVV numbers GRRRR |  |
|  |
EasyJet cyber-attack on 22:42 - May 21 with 1261 views | eghamranger | I’ve had an e mail from easy jet... well I’m assuming it is lol But it says that my details have been disclosed but NOT my passport or credit card details, it then says that it refers to a booking I made between dec 19 and March 2020... but I haven’t booked anything then but I did book something in April... yes I have booked to go to Malaga in February 2021.. don’t know what I can do about it. Me and the missus quite often go to Spain for long weekends, it’s no secret |  | |  |
EasyJet cyber-attack on 22:59 - May 21 with 1251 views | LythamR |
EasyJet cyber-attack on 15:42 - May 21 by A40Bosh | I would be furious if a company as large as EasyJet does not have a PCI PA-DSS compliant way of storing tokenised card numbers in their database and have been storing the CVV. It's one of the fundamental components of industry compliance, no card numbers in the clear and no storing CVV numbers GRRRR |
Which is why they can expect a massive clobbering by the ICO and rightly so |  | |  |
EasyJet cyber-attack on 00:53 - May 22 with 1191 views | Boston | Who knew Eze and Jet had gone into business together? |  |
|  |
| |