Carl T. Holscher is a compiler, writer, tinkerer, coder, designer, thinker living in Bethesda, MD.

 

But it wouldn’t have taken cyber-security genius to figure out something was amiss. The dump site domains registered by the hackers included “tushtime.info” and “justfuckit.info” —which, if any sort of traffic logging was done on POS systems, would have certainly aroused the attention of a system administrator.

Photo illustration by Aurich Lawson

How hackers gave Subway a $30 million lesson in point-of-sale security

Small business laziness or ignorance allow “hackers” to steal millions. If Subway and others would use an ounce of prevention, things like this wouldn’t happen.

I wonder if any of the Subway franchisees who blatantly disregarded corporate IT security practices have faced any repercussions from Subway Corporate.

How about a list so we know which retailers are too irresponsible to handle credit or debit cards?