As details trickle out about New England's Hannaford Bros. grocery chain's data exposure of 4.2 million customer records, questions are swirling about the implications affecting a merchant that has already been certified compliant with PCI security standards. Will security assessors be found liable?
The major data breach affecting Hannaford Brothers grocery chain isn't record-setting in terms of the volume of records exposed--the 4.2 million records breached is dwarfed by the 94 million records exposed during the TJX breach. But the Hannaford breach is groundbreaking in its own way, because this massive security incident is the first publicly-reported exposure to hit a retailer that claims to have been certified as compliant with the Payment Card Industry Data Security Standards.
Source: Baseline, http://www.baselinemag.com