PAR Technology Corporation

PAR Technology Corporation, also known as PAR Technology, is a provider of point‑of‑sale systems headquartered in the United States of America. The company supplies point‑of‑sale technology solutions that are used by retailers to conduct sales transactions. Its primary market consists of retail businesses that rely on its systems for in‑store commerce. As a vendor of POS infrastructure, PAR Technology focuses on delivering the hardware and software components necessary for point‑of‑sale operations. The company’s role places it within the retail technology supply chain that supports merchants’ checkout processes.

In August 2016, PAR Technology experienced a security incident when a Russian cybercrime group breached its vendor server as part of a broader campaign targeting multiple point‑of‑sale providers. The attackers exploited vulnerabilities in the server to steal credentials and gain remote access to retailers’ systems, potentially exposing credit‑card data. PAR Technology described the compromised server as non‑material and lacking production data, and it expressed confidence in its existing security protocols despite the intrusion attempt. The breach was linked to the Carbanak malware family and possibly involved collaboration with operators of the Dridex banking trojan. The attackers’ focus on support infrastructures highlighted the strategic value of compromising vendor networks to reach merchant environments at scale. Other point‑of‑sale vendors affected in the same campaign reported varying degrees of unauthorized access, including malware placement and credential theft, though the specific data impacts remained unclear.