Auto Focus

Global Payments Data Breach: What We Know

On Friday, Global Payments announced a breach of its processing system and that as many as 1.5 million card numbers may have been stolen. Over the weekend, Visa removed Global Payments from its PCI compliance list. What does that mean to you?

On Friday, March 30, credit card transaction processor Global Payments announced it had identified a breach of its processing system and that as many as 1.5 million card numbers may have been stolen. Visa has subsequently removed Global Payments from its PCI (Payment Card Industry) compliance list.

For car rental operators or any merchant using Global Payments’ services, this is cause for concern. Here is what we know culled from statements made by CEO Paul Garcia in a conference call with investors Monday morning, statements disseminated by Global Payments on its website, calls with Global Payments representatives and statements from Visa.

On the conference call, Garcia said that the theft was confined to North America and that cardholder names, addresses, social security numbers or consumer banking information were not obtained by the criminals. The attack was confined to a few North American servers. It is important to note that the potential 1.5 million card numbers are a mere fraction of the millions of accounts processed through Global Payments.

News reports surfaced that fraudulent activity had been linked to some of those accounts. Those news reports have been discredited. No fraudulent activity has been reported on those accounts, according to Global Payments.

Most importantly for car rental companies, no merchant accounts have been affected. Global Payments continues to process Visa transactions in the same manner. A Visa spokesperson confirmed this.

“I cannot stress more vehemently that this does not involve our merchants, our sales partners or their relationships with their customers,” Garcia said on the call. “Neither merchant systems nor point-of-sale devices were involved in any way.”

Car rental companies and other merchants do not have a responsibility to notify clients of this breach. In general, the merchant has no liability in this matter.

Questions arose whether removal from Visa’s PCI compliance list would expose merchants to possible chargebacks or other costs. Those procedures haven’t changed. A Visa spokesperson reiterated that point-of-sale merchants are generally not held liable for fraudulent transactions provided they follow proper procedure. The incident has no impact on transaction processing or normal chargeback processes.

Garcia said Global Payments has the situation contained. When will Visa reinstate Global Payments on its PCI compliance list? No one can say, but the timeline is dependent on finishing the investigation. Regardless, Garcia said he expects the company will be reinstated once it has been issued a new report of compliance.

On questioning during the conference call, Garcia was asked if the company will step up R&D or system spending as a result. “Are we going to spend even more amount of money, quite frankly, on security?” responded Garcia. “The answer is yes.”

For updates on the data breach, visit

Comment On This Story

Comment: (Max. 10000 characters)  
Please leave blank:
* Please note that every comment is moderated.


Author Bio

Chris Brown

Executive Editor

Chris is the executive editor of Business Fleet Magazine and Auto Rental News. He covers all aspects of the fleet world.

Newsletter: Sign up to receive latest news, articles, and much more.

Read the latest

Auto Focus Blog: A blog covering fleets, auto rental and the business of cars

6 Takeaways from the 2018 International Car Rental Show

Technological solutions are finally moving from reality to theory, peer-to-peer platforms are being redefined, China has the biggest room for growth, while Sixt’s U.S. aspirations have only just begun.

The Irony of Customer Service in the Digital Age

Sure, any company would jump at the chance to use technology to reduce labor costs. But it also comes with some big, red, flashing warning lights.

Market Forces Driving Car Rental in 2018

An analysis of the conference calls of Avis Budget Group and Hertz Global Holdings reveal trends and initiatives involving fleet right sizing, pricing, ancillary revenue opportunities, and renting to ride-hailing drivers.

Job Finder: Access Top Talent. Fill Key Positions.