Cosmetic company Tatcha has warned customers that hackers compromised its website and harvested payment card details. The company sent notices out to customers whose card details were stolen back in January after they discovered the breach last month. Robert Capps, VP of Business Development at Fraud Mitigation Company, NuData Security commented below.
Robert Capps, VP of Business Development at NuData Security:
All customer information is valuable to fraudsters. Names, physical and email addresses, passwords, the content of emails – everything that can be used to compile an identity will be used. We must change the current equation of “breach = fraud” by changing how we think about online identity verification. We need to protect all consumer data, but more importantly, we need to make it valueless.
The technology exists right now that prevents fraudsters with stolen valid credentials from accessing accounts because they can’t replicate the consumers’ behaviour.
Analysing consumer behaviour with passive biometrics is completely invisible to real customers and fraudsters alike. It has the added benefit of providing valid users with a great experience without the extra friction that often comes with other consumer identification techniques. When fraudsters try to use stolen consumer data or login credentials, they will find the data is useless.
The balance of power will return to consumer protection when more companies implement such techniques and technology.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.