Data security

Gemalto, which manufactures SIM cards and EMV chips, is investigating a report that U.S. and U.K. spy agencies hacked into the company's network and stole mobile phone encryption keys, a technology also used to secure card data.

Apple Pay's contactless payment model may be straightforward and simple, but it's not the only way to move funds without cards and cash. Many companies are coming up with alternatives that work from phones, smartwatches and other devices.

The apparent hack of Gemalto by U.S. and U.K. spies casts doubt over several security measures vital to the payments industry as it embraces chip cards and adopts digital payments.

Gemalto NV, the largest maker of mobile- phone cards and a manufacturer of EMV card chips, said it’s investigating a report that U.S. and U.K. spies allegedly hacked into its computer network to steal the keys used to encrypt conversations, messages and data traffic.

The financial services industry may be focused exclusively on securing payment card credentials, but other sensitive data can benefit from these efforts.

At least two financial services groups say none of their U.S. bank members have reported the existence of Carbanak malware in their networks, suggesting the threat may not be significant.

Orrstown Bank in Pennsylvania has introduced two-way text messaging between customers and its service agents. It's the latest effort in the banking industry to make communication easier for mobile-first customers.

Decisions about when and how to implement EMV technology in credit and debit cards are difficult. Many banks have decided to slowly phase it in, despite the fact the delay will open them up to greater potential liability.

After a number of high profile security breaches in the past couple of years, consumer trust in the payments system is more fragile than ever.

In two recent overseas incidents, payment companies redefined "security" to suit a specific situation, rather than keeping it the constant that their customers expect.

With the breach threat showing no signs of slowing, security companies are rapidly broadening their systems to simultaneously fight identity fraud stemming from clients' consumers and employees.

Bluefin Payment Systems is making point-to-point encryption available to large merchants that use Heartland Payment Systems as a processor, a key move as U.S businesses grapple with the migration to chip cards.

Kaspersky Lab has unveiled a cyber-heist in which hackers have already stolen $1 billion from banks across the world. Here's what banks should know about how the hackers did it — and what institutions can do to protect themselves.

The theft of 80 million healthcare records will cost Anthem Blue Cross more than $100-million, and payment companies are also under threat since the incident may result in a spike in false card accounts.

MasterCard is testing whether the time is finally right for biometric authentication to take over as the standard of customer-facing security.

Bankers, technology CEOs and President Obama are throwing everything they have at countering the growing threat of cyber attacks, putting their faith in biometrics, tokenization and data sharing. But it's far from clear that it will be enough.

In a wide-ranging interview, the head of the Cleveland Fed talks about her support for a two-tiered regulatory system, the biggest threats facing the system, interest-rate risk, culture and cybersecurity.

Paying for goods and services over the Internet in a variety of ways, from directly keying-in card details on ecommerce sites, to using online wallets, to paying with your phone, is more consumer friendly than ever.

Banks nationwide are finding ways to make mobile deposit capture available to more people and faster without taking on more fraud risk.

Visa Inc. now supports mobile geo-location technology to reduce transaction declines when consumers travel outside of their home area.