Casino Sues Cyber Security Company Over Failure to Stop Hackers

<div dir="ltr" style="text-align: left;" trbidi="on"> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> IT security firm <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Trustwave</b> has been sued by a Las Vegas-based casino operator for conducting an allegedly <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"woefully inadequate"</i> investigation following a network breach of the casino operator’s system.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Affinity Gaming</b>, an operator of 5 casinos in Nevada and 6 elsewhere in the United States, has questioned Trustwave's investigation for failing to shut down breach that directly resulted in the theft of credit card data, allowing credit card thieves to maintain their foothold during the investigation period.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhz7fbu7-oD7gOUVK0dCUKptu4QadIRLC7TXMK8rhNatd-711KrygDpyBATzOL5pR3f5QwTzewXs8Qd_J9rhCdUxw1aBSCTdv3CuC0Wqy1zLqvacYAKKalSmsM3rHqipBZjCZj_BVS_mJc/s1600/casino-hacker_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhz7fbu7-oD7gOUVK0dCUKptu4QadIRLC7TXMK8rhNatd-711KrygDpyBATzOL5pR3f5QwTzewXs8Qd_J9rhCdUxw1aBSCTdv3CuC0Wqy1zLqvacYAKKalSmsM3rHqipBZjCZj_BVS_mJc/s640/casino-hacker_www.hackthesec.co.in.png" width="640" /></a></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The lawsuit, filed in the US District Court in Nevada, is one of the first cases of its kind where a client challenges a cyber security firm over the quality of its investigation following a hacking attack.</div> <div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Casino Sued an IT Security Firm</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Affinity Gaming said it hired Trustwave in late 2013 to analyze and clean up computer network intrusions that allowed attackers to obtain its customers' credit card data.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> It was reported that the details on more than <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">300,000 credit cards </b>used by customers in Affinity's restaurants and hotels were accessed by cyber crooks who compromised its systems.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> A report submitted by Trustwave in mid-January 2014 noted that the security firm had:</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> <ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Identified the source of the data breach</li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Contained the malware responsible for the incident</li> </ul> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, more than a year later after the casino operator was hit by a second payment card breach, Affinity allegedly learned from Trustwave's competing cybersecurity firm, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Mandiant</b>, that the <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">malware had never been fully removed.</i></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; font-style: normal; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The Lawsuit Filed by the Casino Operator</h3> <div style="border: 0px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Here's what Affinity claimed in its <a href="http://www.slideshare.net/SwatiKhandelwal15/trustwave-complaint" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">lawsuit filed</a> at the end of December in the US district court of Nevada:</div> <blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> Hiring a firm with the proper data breach response expertise, such as Trustwave held itself out to be, was of paramount importance for Affinity Gaming...Affinity isn't an IT security firm and lacks the level of expertise.</blockquote> <br style="content: ' '; display: block; font-style: normal; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> With respect to the apparent data breach, Affinity Gaming was wholly dependent on and subordinate in terms of its understanding, knowledge, and capabilities, to Trustwave, relying on [it] to diagnose, investigate, and prescribe appropriate measures to address.</blockquote> <br style="content: ' '; display: block; font-style: normal; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> Mandiant’s forthright and thorough investigation concluded that Trustwave's representations were untrue, and Trustwave's prior work was woefully inadequate. In reality, Trustwave lied when it claimed that its so-called investigation would diagnose and help remedy the data breach when it represented that the data breach was "contained," and when it claimed that the recommendations it was offering would address the data breach. Trustwave...failed to identify the means by which the attacker had breached Affinity Gaming's data security. Thus, Trustwave could not in good faith have made the foregoing representations to Affinity Gaming.</blockquote> <div style="border: 0px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, Trustwave denies any wrongdoing. A Trustwave spokesperson <a href="http://www.ft.com/intl/cms/s/0/05b4ee8c-badd-11e5-bf7e-8a339b6f2164.html#axzz3xOXXzWG8" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">told</a> the Financial Times (FT) on Friday, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"We dispute and disagree with the allegations in the lawsuit and we will defend ourselves vigorously in court."</i></div> </i></div> </div> </div>

Casino Sues Cyber Security Company Over Failure to Stop Hackers

IT security firm  Trustwave  has been sued by a Las Vegas-based casino operator for conducting an allegedly  "woefully inadequate...

Read more »