Point-of-sale data breaches have now reached the cloud

Lightspeed's cloud-based point-of-sale system, with 38,000 clients, has suffered a break-in

The latest in a string of hacks against retail point-of-sale systems has hit the operator of a cloud-based service with about 38,000 business clients.

Montreal-based Lightspeed reported the breach on Thursday and said it affected a system that retailers can use from tablets, smartphones and other devices.  

The incident occurs as a growing number of retailers and hotels have been targeted by hackers, who typically install malware into the point-of-sale systems to steal credit card numbers.

The breach at Lightspeed targeted a central database that stores client information, the company said. The incident exposed data related to sales, products, and encrypted passwords that clients use to get on Lightspeed's system.

In some cases, consumers’ electronic signatures that have gone through the point-of-sale software were also accessed. However, Lightspeed has found no signs that any data was stolen or used.

“It’s worth noting that Lightspeed does not store credit card information, and therefore no cardholder data was compromised in this incident,” said Bradley Grill, a company spokesman, in an email.

alightsped pos Lightspeed

Lightspeed's point of sale software

Although Lightspeed didn’t provide specifics, it said the passwords that were accessed were secured with “advanced encryption technology” that Lightspeed upgraded in January 2015.

An investigation is already under way, and Lightspeed has sent out an email alert to clients. The company is recommending clients change their passwords.

Point-of-sale systems have become an attractive target for cyber criminals, often because attacking one system can also mean access to dozens or hundreds of retail stores.

In Lightspeed’s case, the company has business clients with $12 billion in transactions annually. These clients include many smaller retailers that sell clothing, jewelry, books and sporting equipment. The company’s retail point-of-sale system operates as a cloud-based service that can work on iPads and other devices.

In response to the breach, Lightspeed is limiting “personal access” to the company’s production infrastructure and sensitive data. It’s also upgrading its security to detect more advanced attacks.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Michael Kan

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?