A Christian-friendly payments processor spilled 6 million transaction records online

guest · Jan 28, 2020

A Christian-friendly payments processor spilled 6 million transaction records online
January 28, 2020
https://techcrunch.com/2020/01/28/cornerstone-payments-credit-cards/

A little-known payments processor, which bills itself as a Christian-friendly company that does “not process credit card transactions for morally objectionable businesses,” left a database containing years’ worth of customer payment transactions online.

The database contained 6.7 million records since 2013, and was updating by the day. But the database was not protected with a password, allowing anyone to look inside.
Security researcher Anurag Sen found the database. TechCrunch identified its owner as Cornerstone Payment Systems, which provides payment processing to ministries, non-profits, and other morally aligned businesses across the U.S., including churches, religious radio personalities, and pro-life groups.

A review of a portion of the database showed each record contained payee names, email addresses, and in many but not all cases postal addresses. Each record also had the name of the merchant who is being paid, the card type, the last four-digits of the card number, and its expiry date.
Click to expand...

After TechCrunch contacted Cornerstone, the company pulled the database offline.

“Cornerstone Payment Systems has secured all server access,” said spokesperson Tony Adamo.
“It is vital to note that Cornerstone Payment Systems does not store complete credit card data or check data. We have put in place enhanced security measures locking down all URLs. We are currently reviewing all logs for any potential access,” he added.
Click to expand...

Log in or Sign up

A Christian-friendly payments processor spilled 6 million transaction records online

guest Guest

Log in or Sign up

A Christian-friendly payments processor spilled 6 million transaction records online

guest Guest

Useful Searches