Avanti Markets

Avanti Markets operates as a vendor of self-service food kiosks in the United States, with its headquarters located in the country. The company provides kiosk platforms that enable food service transactions, including payment processing for credit and debit cards. In addition to standard payment functions, its kiosks support biometric fingerprint verification for user authentication. Avanti Markets also offers stored-value Market Cards that can be used by customers for purchases within the kiosk network. These solutions are deployed in various self-service food environments where automated point-of-sale functionality is required.

A notable attribute of Avanti Markets is its integration of payment card processing, biometric authentication, and stored-value card capabilities within its self-service kiosk hardware. The 2017 security incident involving the PoSeidon (FindPOS) malware demonstrated that approximately half of the company’s kiosks lacked point-to-point encryption at the time of the attack. This gap increased the exposure of payment card data, cardholder names, expiration dates, and potentially biometric information from users who employed fingerprint verification. The breach also revealed that names and email addresses associated with stored-value Market Cards could be compromised. Analysis of the event highlighted risks linked to third-party-managed IoT devices and insufficient network segmentation in payment environments. Consequently, the incident underscored the importance of encrypting payment data end-to-end and strengthening segmentation between corporate networks and kiosk endpoints.