Navy Zebra

Navy Zebra, operating under that alias, is a subsidiary of Bankcard Services and is headquartered in the United States of America. The organisation supplies point‑of‑sale (POS) systems to businesses across the United States, focusing on the retail sector where its hardware and software solutions are deployed at checkout environments. As a subsidiary, it functions within the broader Bankcard Services structure while maintaining its own operational focus on POS technology provision. Its core offering consists of the terminals, software platforms, and related services that enable merchants to process electronic payments. The organisation’s market reach is limited to the United States, as indicated by its headquarters location and the description of its customer base.

In August 2016, Navy Zebra was identified as the victim of a cyber‑attack that formed part of a coordinated campaign targeting multiple POS providers. Attackers, believed to be a Russian cybercrime group leveraging the Carbanak malware framework, infiltrated the organisation’s servers to install two distinct backdoors and harvest credentials. The intrusion was aimed at using the compromised POS vendor as a stepping stone to reach the networks of retailers that relied on its systems for payment processing. Despite the breach, Navy Zebra asserted that no private data was stored on the affected servers, a claim that was part of its public statement following the incident. The event highlighted the broader trend of threat actors exploiting third‑party web‑portal vulnerabilities within the POS supply chain to facilitate credential harvesting and remote system infiltration. This incident contributed to industry awareness of the risks associated with outsourced payment‑processing components and underscored the importance of securing vendor‑managed infrastructure against sophisticated malware campaigns.