The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

Submit Your New Corporate Hires/Promotions
or New Position 

Top Industry News
 

Learn more at www.detex.com

Brinker International Press Release Friday
Update on Chili's Restaurants POS Data Breach
On May 11, 2018, we learned that some of our Guests’ payment card information was compromised at certain Chili’s restaurants as the result of a data incident. Currently, we believe the data incident was limited to between March – April 2018; however, we continue to assess the scope of the incident

Based on the details currently uncovered, we believe that malware was used to gather payment card information including credit or debit card numbers and cardholder names, and potentially expiration dates and CVV codes from our payment-related systems for in-restaurant purchases at certain Chili’s restaurants.

Chili’s does not collect social security numbers, full date of birth, or federal or state identification numbers from Guests. Therefore, this personal information was not compromised. mediaroom.com

The Bright Side of GDPR: Better Data Practices Build Trust
A new report from the Enterprise Data Management Council makes the case that strong data management practices prompted by the General Data Protection Regulation could have effects beyond simply complying with the EU’s rule.

While GDPR is a regulatory mandate, if executed effectively there is significant business value derived from the resulting … enhanced customer relationship. The GDPR regulation requires a process of interaction with a customer that delivers transparency, customer empowerment, efficient portability, and data quality. These are all opportunities to deepen the relationship and develop trust, providing a positive customer experience in order to drive profit and gain competitive advantage. associationsnow.com

Network security in the age of the internet of things
Ten years ago, we only worried about protecting our computers, and it was only five years ago when we needed to protect our smartphones. Now we need to consider protecting our fridges, heating systems and industrial machines in order to safeguard company networks.

These devices are becoming an increasingly attractive target for criminals, as more connected devices mean more attack vectors and possible vulnerabilities.

“Each team involved in facilities management and network operations typically has visibility of each other’s systems; this creates islands of self-contained information. The problem is, should one system/group see an issue, it is only seen on their system. This lack of interconnected view is what hackers exploit.”

One of the core problems with IoT devices is that despite being network-connected, they were originally not considered a threat. And that is true when they are considered as separate entities, but when they connected to a wider corporate network, this network-connected device with weak security becomes a vulnerable point of the network and a risk to data security.

IoT devices are also always connected, always on and typically use a one-time only authentication, further making them ideal targets for network infiltration. “Once a hacker has gained access to the system and logged in, there are no secondary checks and often no event logs,” says Tankard. “From here they can install malware or any other monitoring software with no alerts being sent to the system console or, worse still, to any IDS installed within the organization.

The first thing organizations should do is ensure all IoT devices are properly updated and patched with the latest security updates that are available for the devices. Manually updating each device is simply not feasible due to the number of devices an organization can expect to have. Equally, automatic updates can carry with them the risk of being exploited. The ideal solution would be to dry-run the update on a test device to check the update performs correctly.

Organizations should consider performing a risk assessment of the danger posed by a vulnerable update being installed for each of network-connected device and assess each update on a case-by-case basis. Also, this process should be incorporated into the organization’s data protection strategy. “Businesses must have complete sight of where the device is located, how it is being used and the corporate access governance it includes.” computerweekly.com

Multifactor Authentication
Call Centers Vulnerable to Spoofing & Fraud
Sophisticated fraudsters do not limit themselves to the online channel, and many organizations have been slow to adopt effective measures to mitigate the risk of fraud carried out through other channels, such as customer contact centers. In many ways, the phone channel has become the weak link.

Most contact centers have continued to rely heavily on knowledge-based authentication to grant callers access to their accounts. However, the ready availability of personal information, either stolen in data breaches or gleaned from social media, makes it increasingly easy for criminals to impersonate customers. Add in some Caller ID or automatic number identification (ANI) spoofing, and fraudsters are well on their way to deceiving call center staff and taking over customer accounts.

The basic answer, no matter the particular security solutions involved, is multifactor authentication. Multifactor authentication has long been recognized as more secure, and the available tools are becoming increasingly sophisticated. For example, to incorporate an inherence factor, which uses a physical attribute of a caller, contact centers can deploy voice recognition systems. These systems obtain a voice print from a caller and compare it to a reference voice print to make an authentication determination.

A complementary technology uses a caller's phone as an ownership-based authentication token.

In transitioning to an optimally secure authentication solution, voice biometrics or phone ownership authentication can be paired with KBA to create a quick-fix two-factor authentication approach. Our recent survey of contact center professionals showed that the majority of organizations planning to move to multifactor authentication expect to do so by adding a new factor to their existing KBA process. darkreading.com

Get Ready for 'WannaCry 2.0'
They're still out there, pinging away for vulnerable Sever Message Block (SMB) services in order to find a way in. One year after the historic and massive WannaCry ransomware attack unleashed by nation-state hackers from North Korea, an unknown number of WannaCry-infected Windows machines in their zombie state around the globe continue to attack other devices.

WannaCry marked the biggest ransomware attack ever, but it wasn't the first widespread worm infection, and experts say it won't be the last. Symantec blocked some 5.4 billion WannaCry attack attempts last year overall.

Security experts say another worm-spreading mass attack akin to WannaCry is inevitable. It may not be a ransomware attack, but it likely will be another SMB-type worm that exploits the fact that so many organizations leave Windows machines unattended and with open ports to the Internet - and unpatched for the newest flaws. darkreading.com

'Live in NYC 2018' Top 5

#5

Intelligent Video.
What's Your Store Showing You?

Network surveillance technologies continue to revolutionize the way retail professionals work with not just loss prevention, but also with store optimization, operational efficiencies, and enhancements to the overall customer experience. Hedgie Bartol, Retail Business Development Manager for Axis Communications, tells us how new advancements in intelligent devices and deep learning technology can provide business intelligence that helps LP/AP professionals drive results beyond shrink, safety, and security.

e-commerce
Sponsored by The Zellman Group

Opinion: Online Retailers Profit Because You Can't Squeeze The Charmin
From the 1960s to the 1980s, a fictional supermarket manager, Mr. Whipple, was the face of Charmin toilet paper. He would lecture customers not to "squeeze the Charmin" only to immediately thereafter do the same thing himself. According to the manufacturer Proctor & Gamble, The Mr. Whipple character was created to promote Charmin’s "squeezable softness.”

Although a simple idea, the nostalgic marketing campaign wonderfully exemplifies the fundamental shortcoming of online retailers. When humans visit a brick and mortar store, most come armed with five senses -- sight, hearing, taste, smell and touch -- which are used every day to detect threats that unless quickly identified, can lead to all manner of emotional and physical pain, injury and even death.

In the technology-laden online world, especially at huge third-party marketplaces such as Amazon, eBay, Rakuten, Alibaba and Taobao, the ability to employ the five senses prior to purchase is significantly limited if not totally absent. Not only do online marketplaces deprive consumers of their ability to employ their senses, they are also often victimized by a lack of transparency as to the true identity of the actual seller or reseller, manufacturer, supply and distribution chain and even the method of delivery.

One must ask why wouldn't Amazon and eBay do more to fight online counterfeiting more proactively and aggressively? The answer is quite simple. Much like the explosive data privacy and transparency issues facing Facebook and other social media sites, full transparency and user protection are bad for their business model. Just as more transparency regarding the security and marketing of Facebook user information will undoubtedly cause users to question the wisdom of using its platform, so too would explicit transparency regarding the manufacturers, suppliers, distributors and resellers of advertised products on online marketplaces likely cause more caution and examination before making a purchase. Apparently, Amazon isn't even cracking down on third-party resellers who may be selling counterfeit or questionable goods which may be dangerous to unsuspecting consumers who think they are getting the real product.

It is far from a certainty that technology will or should ever be developed which can reliably and accurately virtualize the five senses, so the only logical present-day solution to combat online counterfeiting and fraud is to replicate as much of the brick and mortar shopping experience online at the point of purchase. forbes.com

Retailers risk frustrating online shoppers with out-of-date payment technology
While 86 per cent of retailers say they are looking to increase online transactions over the next 12 months, the study suggests that many aren’t providing the best possible ecommerce experience for their customers. Keeping payment technology up-to-date helps retailers provide shoppers with a fast and easy experience at the online point of sale and could help drive revenue by reducing online abandonment.

This comes as the study shows that retailers could be missing out on 18 billion UK pounds in sales each year, as consumers abandon online baskets worth almost 30 UK pounds a month. Barclaycard research also shows that 15 per cent of shoppers have chosen to abort an online purchase because they couldn’t pay using methods such as ‘one-click’ ordering, while 16 per cent highlight long checkout processes as their biggest frustration when buying online. One in five (22 per cent) consumers also say they would like to see more retailers incorporate faster payments technology into their websites to speed up the check-out process. finextra.com

President threatens to raise Amazon’s postal rates
President Donald Trump just threw another swing at Amazon in his ongoing feud with the company’s CEO Jeff Bezos. President Trump personally pushed U.S. Postmaster General Megan Brennan to double the rate the United States Postal Service charges Amazon and other firms to ship packages, a dramatic move that probably would cost these companies billions of dollars, according to the Washington Post.

Three sources told the Post that Brennan has resisted the demand, stating that these arrangements are bound by contracts, and must be reviewed by a regulatory commission. She added that Amazon’s relationship is beneficial for the USPS, and gave him a set of slides that showed the variety of companies, in addition to Amazon, that also partner for deliveries. chainstoreage.com

Some think landing Amazon HQ2 would be a big problem in Boston

Kount integrates BehavioSec's behavioural biometrics to boost authentication

How Amazon’s floating warehouse blimps are about to change product delivery forever

ORC News
Sponsored by Auror

Muncie, Ind., Married ORC Couple Get Nearly 6 Yrs in Fed. Prison for $1.2M Amazon Theft
Erin Joseph Finan (5 yrs. 11M) and Leah Jeannette Finan (5Y 10M), both 38, were sentenced Thursday in U.S. District Court, Indianapolis, after each pleading guilty to mail fraud and money laundering. They're also ordered to make restitution of $1,281,504.00 as well has having forfeited personal assets.

At the time the Finans were charged in May 2017, U.S. Attorney Josh Minkler said they had purchased hundreds of electronics items from Amazon, using “hundreds of false online identities.”

They then routinely contacted Amazon and falsely claimed the items they received were damaged, receiving replacements from the retailer at no cost.

Authorities said the Finans sold the merchandize they received fraudulently to Danijel Glumac, 29, of Inndy., who in turn sold them to an unnamed “New York entity,” which sold the items to consumers.

Editor's Note: The "other New York entity" has not been named and we would assume they will be soon enough - what retailer is it? As it specifically states the items were sold to consumers.
 
Co-defendant in the federal case, Danijel Glumac, 29, of Indianapolis, is scheduled to be sentenced in June. thestarpress.com

Richmond, RI: Women had $20,000 worth of stolen merchandise from Outlets in their car
Police say they were pulled over on Interstate 95 in Richmond on Friday for violating the law that requires drivers to move a lane over and slow down when there's an emergency vehicle stopped on the highway. Troopers say stolen designer clothing, jewelry, perfume and cosmetics were in plain sight. Police say they also found foil lined "booster bags" used by shoplifters to fool store security, in the vehicle. sfchronicle.com

Clinton, IA: Home Depot theft scheme ends in guilty plea; Restitution of over $1,600
Tammy R. Kershner, 50, appeared Thursday in Court and pleaded guilty to second-degree theft, a class D felony. The plea agreement states Kershner will agree to victim restitution in the amount of $1,628.13. On Feb. 8, a Home Depot asset protection manager contacted the Police in reference to a theft scheme. The asset protection manager had information a female was entering the store empty handed or with an empty shopping cart, selecting non-purchased merchandise from the sale floor and taking the non-purchased to the returns register. The affidavit states during the transactions Kershner went to the returns area and presented the merchandise not purchased for a refund without making prior payments for the merchandise. Kershner did this on six separate occasions at the Home Depot store. clintonherald.com

Gloucester County, NJ: Woman Sought In Retail Theft Ring
Corinne L. Post, 33, of Blackwood, is wanted by the Gloucester County Prosecutor's Office for failure to appear in Superior Court, Woodbury on Nov. 9, 2017, for a pre-indictment conference on shoplifting and fencing charges. Post is accused of stealing merchandise from a Marshall's store and trafficking in merchandise stolen from retailers in Deptford and Washington townships as part of an alleged organized retail theft ring. On June 12, 2017, Post was charged by New Jersey State Police with second-degree shoplifting and third-degree fencing. patch.com

Nederland, TX: Store catches thieves on camera stuffing $1,000 of stolen items into their pants
A group of men were caught on camera stuffing more than $1,000 worth of clothes into their pants at a Nederland industrial store. "It's very discouraging for someone to come and take your stuff like that," said Teresa Figueroa, wife of the small business owner. The not-so-sneaky shoplifters are now caught on camera stuffing their pants with over $1,000 worth of refinery work clothing. 12newsnow.com

UK: Cheshire, England: Organized Crime Ring target three Car phone Warehouse stores in violent attacks

Soho, NY: Thieves purchase $800 of sunglasses with stolen credit card

Queens, NY: Shoplifter with gun sticks out his tongue as he flees Burlington store

Retail Crime News
 

Shootings, Deaths & Hit-and-Run

Jackson, MI: Dashcam video of Dollar General Armed Robbery suspect shot and killed as he draws his gun at Police
The video shows the officers in Jackson, Michigan repeatedly telling Kenneth Townley, 47, to drop his gun before eventually opening fire after he refused. No charges will be filed against the five officers after a Jackson County prosecutor determined that the shooting was justified. The harrowing footage begins when the officers pull up and see Townley, who matched the description of a man who robbed a nearby Dollar General store just minutes earlier. dailymail.co.uk

Downey, CA: Man turns himself in for suspected hit-and-run that left a Security Guard critically hurt
A man suspected of attempted homicide turned himself into authorities Friday in connection to a Downey security guard who was seriously wounded in a restaurant parking lot. The suspected driver, Hector Vallejo, 28, was arrested and booked after he turned himself in. Authorities are also looking for two other people, Rosie Padilla and Patricia Bujase, both of Bell Gardens. The security guard, 49-year-old Joseph Quintero, of Downey, is fighting for his life as he is listed in critical condition in a hospital. Investigators said Bujase was involved in an argument that included the other two suspects inside Gloria's restaurant, which led to the security guard escorting them out of the establishment. It ultimately led to the hit-and-run in the parking lot.  abc7.com

Monroe, LA: Man charged with Attempted Murder outside of Target
Monroe Police were called around 4:30 p.m. Saturday afternoon to Target on Pecanland Mall Drive, for a disturbance outside of the store. When they arrived they found a man who says he was leaving the area, when he heard several shots fired behind him, and then saw a man following him. Police say that man is 29 year old JeQuinton Bolton. Police say one shot appears to have hit the victim's car door. Bolton surrendered to police, and told them he did fight with the victim, but no gun was involved. myarklamiss.com

Totowa, NJ: Man arrested in the stabbing death of a man outside C-Store, witnessed by Police

Wyoming, MI: Gas Station clerk shot and killed in Armed Robbery

Albany, GA: Man trying to stop a fight inside a C-Store is shot and killed, Two in custody

Robberies & Thefts

Johnstown, OH: Police investigating attempted Robbery, Stabbing at Kroger
Police are investigating after a woman was slashed with a knife while in the bathroom at Kroger. Lt. Josh Boudinot said the female victim walked into the bathroom and another female followed her into one of the larger, handicapped stalls at the Kroger around 10:25 a.m. Saturday. Boudinot said the suspect pulled a knife and demanded the victim's purse. The victim refused and the suspect slashed the victim multiple times in the abdomen. The victim also suffered some defensive wounds to her hands. The suspect fled without getting the victim's purse and left the store in a white SUV. newarkadvocate.com

Beverly Hills, CA: Smash & Grab Burglary Reported at Saks Fifth Avenue
A burglary was reported after 4 a.m at the Saks Fifth Avenue in Beverly Hills Monday morning. Responding officers found a broken window at the men’s store and began searching the scene. The entire store front window was eventually taken out for the investigation. Video from the scene showed a backpack outside of the store that appeared to have been taken from inside. It is unknown what was taken during the burglary, but several cases inside the store appeared to be smashed or compromised. ktla.com

Champaign County, IL: Police seeking 2 suspects in Kohl’s theft

Helzberg Diamonds in the Haywood Mall, Greenville, SC reported at Distraction Theft, item valued at $7,998

Kay Jewelers in the Shops of Fenton, Fenton, MI reported an Armed Robbery/ Smash & Grab, items valued at over $100,000

Kay Jewelers in The Greene, Beavercreek, OH reported a Grab & Run on 5/18, item valued at $13,899.

Piercing Pagoda in the Southlake Mall, Merrillville, IN reported a Burglary on 5/18, items valued at $51,000

Piercing Pagoda in the Lloyd Center, Portland, OR reported a Grab & Run on 5/19, items valued at $1,188

Zales Outlet in the Tanger Outlet Centers, Commerce, GA reported a Distraction Theft, item valued at $6,860

Zales in The Empire, Sioux Falls, SD reported a Diamond Switch on 5/19, item valued at $5,999

Six Robberies in Two and a Half Hours in Seattle - Linked to Two on May 16th - Suspects on the Loose

Counterfeit

CBP seizes counterfeit jewelry worth more than $3M at Philly Airport
U.S. Customs and Border Protection officers confiscated dozens of rings and bracelets coming in from Hong Kong and branded with the names "Tiffany" and "Cartier. The jewelry was estimated to have a value of more than $3 million. Third major bust this year of jewelry this year in Philly. fox29.com

Sentences, Arrests & Charges

North Little Rock, AR: Suspect connected to three robberies faces charges

Jacksonville, FL: Suspect of Westside gas station murder arrested

Joplin, MO: Jewelry store robber draws 25-year prison term

Union County, NC: Father and son charged for trio of McDonald's armed robberies

Modesto, CA: Man acquitted of murder gets prison time for armed robberies

Dallas, TX: Irving Man Sentenced to 155 Months in Federal Prison String of Armed Robberies

Jacksonville, FL: US Marshals arrest suspect for the murder of a in 65 year old C-Store customer

Poplar, MT: Man charged in federal court for beating death of a man behind a C-Store

Columbus, GA: Handcuffed woman runs from Police Officers during arrest at Walmart

Cedar Rapids, IA: Man granted new trial in girlfriend's stabbing death outside a Hy-Vee Grocery store, pleads guilty to murder

Arson & Bomb Threats

West Manchester Township, Kohl's Loss Prevention employee charged with setting Fire inside store, then puts it out
A former Kohl's employee who police say is also a volunteer firefighter allegedly set a fire inside the West Manchester Township store in May 2017, and then put it out. Eric J. Robertson, 28, was employed as a loss prevention officer at the store until his termination in late June. Charges against Robertson were filed on Tuesday. He was arraigned the next day and released on $10,000 unsecured bail. Robertson, faces three counts of arson and one count each of reckless burning or exploding, dangerous burning, and tampering with/fabricating physical evidence. Police began their investigation on May 1, 2017 after they were called to the Kohl's, for a small fire in the store's electrical room. Once there, police found several stuffed animals that had been burned in the fire. They also learned that the fire had been extinguished by the store's loss prevention officer, Robertson, before they got there. It is believed that Robertson lied to Investigators regarding camera coverage of the area and the status of a broken DVD burner. Robertson has denied setting the fire, he has a preliminary hearing before scheduled for June 11. ydr.com

Liberty, OH: Walmart evacuated for bomb threat

Panama City, FL: Bomb threat made to Panama City Mall leads to mall closure and evacuation

Home of the Industry's Original
On the Move
 

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Featured Job Listings
Sponsored by NuTech National
Feature Your Job Here For 30 Days -
70% Aren't On the Boards

Daily Jobs
Appearing One Day Only
View our Internet Jobs Archives here

• LP Supervisor - Kohl's - Austell, GA

• LP Supervisor - Kohl's - Hiram, GA

• LP Supervisor - Kohl's - DeKalb, IL

• Regional LP Manager - Amazon - Eastvale, CA

• LP Specialist - Amazon - Eastvale, CA

• Area LP Manager - Ross Stores - Tempe, AZ

• Regional AP Manager - Dollar Tree - Boston, MA

• Regional LP Manager - Brooks Brothers - Beverly Hills, CA

• District AP Leader - CVS Health - San Bernardino, CA

• Area AP Manager - JCPenney - Lexington, KY

• Area AP Manager - JCPenney - Hamilton, OH

• LP Manager - Dollar General - South Portland, ME

• ETL Assets Protection - Target - Odessa, TX

• LP & Safety Manager - Lowe's - North Augusta, SC

• AP Specialist - The Home Depot - Miami, FL

Your Career
 

Tip of the Day
Sponsored by Vector Security Networks
 

It seems like we're always saying "get back to the basics" and "keep it simple" almost on a daily basis. We say it so much, most of us don't even hear it and certainly don't appreciate its absolute truth that it speaks to. In our self-motivating attempts to be great at what we do, oftentimes we run faster and try to do more and lose sight of one basic rule. Success begins with the basics. And it's only when we feel like we've evolved beyond them that we find we've only outsmarted ourselves and at that point we've all got to start over and just get back to the basics.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

Upcoming Events

SAVE THE DATE Q2 RAM LP Committee Meeting June 13 Midwest Cargo Security Council One-Day Cargo Security Summit June 20 RLPSA Annual Conference Aug. 5-8 GRAORCA Retail Crime Conference Aug. 29 Retail Risk - New York Sept. 6 New England LP Expo Sept. 13 SAVE THE DATE Q3 RAM LP Committee Meeting Sept. 14 - DCU Center Worcester, MA CORCA Conference Oct. 3-4 Anti-Counterfeit & Currency Expo Nov. 6-8 SAVE THE DATE Q4 RAM LP Committee Meeting Nov. 7th BJ's Wholesale Inc Corp. Office - Westboro, MA RLPSA Connect Nov. 15

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Reach your target audience in 2018 every day!
Request our 2018 Media Kit

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally