US-based POS products provider announces security breach

The breach occurred on January 3, 2019, online publication ZDnet cited NCBP. The company said it detected suspicious activity on its network on the second day and started an investigation with the help of a third-party forensic investigator. The company said hackers compromised its IT system and later planted POS malware on the network of some of its customers. The malware could harvest cardholder name, credit card number, expiration date, and CVV.

The investigation confirmed the breach on January 30, 2019, and as a result the POS company published a list of 139 locations that the attacker compromised and deployed POS malware on their POS networks. All are either bars, coffee shops, or restaurants.

NCBP is still investigating the nature of the security breach and has yet to determine how each business has been impacted. NCBP POS systems are installed at over 6,500 locations, meaning the breach impacted only 2% of the POS company’s customer base.