Heartland to Pay up to $60 Million to Visa Over Breach

Heartland Payment Systems will pay up to US$60 million to issuers of Visa credit and debit cards for losses they incurred from a 2008 data breach at the large payment processor. The settlement between Heartland and Visa, announced Friday, will offer card issuers “an immediate recovery with respect to losses they may have incurred from the Heartland intrusion,” Ellen Richey, Visa’s chief enterprise risk officer, said in a statement. Heartland disclosed the breach a year ago. The U.S. Department of Justice has charged Albert Gonzalez and several other accomplices with the data breach, and Heartland was one of several companies they broke into using SQL injection attacks. Gonzalez and his associates stole more than 130 million credit card numbers from Heartland, prosecutors alleged. Read the full PC World article here.