Delta and Sears data breach exposes credit card information of customers

Some customers of Delta Airlines and Sears had their credit card information exposed following a data breach last fall at a mutual contractor, the companies announced Wednesday.

Some customers of Delta Airlines and Sears had their credit card information exposed following a data breach last fall at a mutual contractor, the companies announced Wednesday.

San Diego-based [24]7.ai, a customer experience software and services company, said in a press release that a data breach into customer payment information began on Sept. 26, 2017, and was discovered and contained on Oct. 12, 2017.

Sears said that less than 100,000 customers likely were affected. Delta Airlines said a “small subset” of customers had been affected by the breach, but that “customers’ passport, security and frequent-flyer information had not been included in the breach.”

Both Delta and Sears said they will ensure that customers will not be liable for fraudulent transactions on their credit cards resulting from the supply chain breach. Delta said it would set up a website for concerned customers today, and Sears promised to create a hotline for customers by Friday.

“We have notified law enforcement and are cooperating fully to ensure the protection of our clients and their customers’ online safety. We are confident that the platform is secure, and we are working diligently with our clients to determine if any of their customer information was accessed,” the [24]7.ai press release read.

According to their website, [24]7.ai processes over 275 million web visitors per month for its clients across eight industries including financial services, retail and e-commerce, and travel and hospitality.

[24]7.ai did not immediately respond to requests for comment.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure