Menu
Browse

Verifone

Primary URL Location Industry
www[.]verifone[.]com
Country United States of America
Financial Services Icon
Financial Services
Profile

Verifone operates within the payment technology sector, specifically providing payment solutions for gas stations. This includes managing fuel station terminals, which are critical hardware components facilitating transactions at the point of sale. The company's core services involve enabling secure electronic payments for merchants operating in the fuel retail market. While headquartered in the United States, the specific global scope and scale of its operations beyond this market segment are not detailed in the provided source material.

A significant cybersecurity incident impacted Verifone's corporate network in 2016. Attackers, identified as a Russian hacking group, compromised the network for several months, specifically targeting a customer support unit responsible for the gas station payment solutions. The initial intrusion vector involved phishing emails containing malicious macros. Forensic investigation indicated the attackers sought access to point-of-sale systems, exploiting vulnerabilities present in fuel station terminals. These vulnerabilities were partly attributed to delayed security upgrades related to chip-based card reader technology, increasing fraud susceptibility. Verifone's response included mandatory password resets, restrictions on software installations, and initiating forensic investigations. Notably, the breach did not compromise the separate payment services network. This incident demonstrated persistent threats targeting payment infrastructure providers and shared similarities with previous attacks on entities like Oracle MICROS.

Incidents
Linked incidents available to members
1 incident