Lumension® Endpoint Intelligence Center

Intelligence Center » News Archive » Breach at Goodwill vendor lasted 18 months

Breach at Goodwill vendor lasted 18 months


KrebsOnSecurity - (National) Payment vendor C&K Systems stated that its hosted managed services systems were found by investigators to be compromised between February 10, 2013 and August 14, 2014, allowing the installation of the infostealer.rawpos point of sale (PoS) malware that led to payment card breaches from over 330 Goodwill retail locations. The malware infection was not detected by the company's systems until September 5 and affected Goodwill and two other customers.


Note: This news synopsis is taken from the DHS Daily Open Source Infrastructure Report, a daily [Monday through Friday, except US Federal holidays] summary of open-source published information concerning significant critical infrastructure issues; a 10-day archive of the DOSIR can be found at:

Last Updated: 27 May 2016 10:21:43