Get breaking news alerts via email

Click here to manage your alerts
Bloomberg News: Smart cards prevent stores from becoming next Target

Bloomberg News

Bloomberg News

First Published Feb 07 2014 01:01 am • Last Updated Feb 07 2014 01:01 am

Three days of hearings on Capitol Hill about the jaw-dropping data breaches at Target and Neiman Marcus brought to light one new apology and at least two familiar lessons. The lessons are worth reiterating.

First, there’s fresh evidence that retailers have a hard time admitting when they’ve been hacked. Once they do, they find it hard to tell the whole story.

Join the Discussion
Post a Comment

Target said nothing about the breach until an independent security researcher disclosed it on his blog. In its initial statement, the company said the attack involved 40 million card accounts. Three weeks later, Target revealed that other records affecting 70 million customers had also been stolen. Finally, after repeating "how sorry we are that this happened," a Target executive divulged that the breach had lasted three days longer than initially admitted. Neiman Marcus has been similarly evasive.

This is the kind of slow-motion, piecemeal response that infuriates consumers. A uniform federal standard mandating how retailers report data breaches, which some in Congress are advocating, would be an improvement over the varying state-by-state disclosure laws now in effect, which can allow companies to investigate for months before announcing anything. On this, most retailers and banks agree.

The second lesson is to speed adoption of smart-chip cards, which have encrypted chips embedded in them and often require a password to use. Consumers in about 80 countries now use the technology, which has been shown to significantly reduce fraud and identity theft, but it hasn’t caught on in the United States, where most cards still use antiquated magnetic-stripe technology.

Switching to the new cards is a complicated and expensive process that requires cooperation between several parties — card issuers, banks and merchants — with conflicting priorities. Merchants don’t want to shell out for new smart-chip terminals, for instance, unless they’re sure that issuers will pay up to produce the cards.

Yet it’s worth it: Although these cards wouldn’t have prevented the data theft at Target, in which malware was installed in registers using a dimly understood process, they would have made using that data to create counterfeit credit cards much harder — and thus substantially reduced the incentive to try. In Britain, where smart cards were introduced in 2004, losses from card counterfeiting had declined by 68 percent by 2012.

Merchants and issuers are expected to finally adopt the technology in the United States by October 2015. Target, commendably, now plans to accelerate its transition and have the gear in place by early next year.

As other retailers watch Target contend with investigations, lawsuits, and the ire of consumers and investors alike, doing the same might start looking cheaper and cheaper.

Copyright 2014 The Salt Lake Tribune. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Top Reader Comments Read All Comments Post a Comment
Click here to read all comments   Click here to post a comment

About Reader Comments

Reader comments on sltrib.com are the opinions of the writer, not The Salt Lake Tribune. We will delete comments containing obscenities, personal attacks and inappropriate or offensive remarks. Flagrant or repeat violators will be banned. If you see an objectionable comment, please alert us by clicking the arrow on the upper right side of the comment and selecting "Flag comment as inappropriate". If you've recently registered with Disqus or aren't seeing your comments immediately, you may need to verify your email address. To do so, visit disqus.com/account.
See more about comments here.
Staying Connected
Contests and Promotions
  • Search Obituaries
  • Place an Obituary

  • Search Cars
  • Search Homes
  • Search Jobs
  • Search Marketplace
  • Search Legal Notices

  • Other Services
  • Advertise With Us
  • Subscribe to the Newspaper
  • Access your e-Edition
  • Frequently Asked Questions
  • Contact a newsroom staff member
  • Access the Trib Archives
  • Privacy Policy
  • Missing your paper? Need to place your paper on vacation hold? For this and any other subscription related needs, click here or call 801.204.6100.