PCICompliance

Major Retailers Add PhoneFactor to Protect Credit Card Data in Time for the Upcoming Holiday Shopping Season

The holiday shopping season is notoriously the busiest time of the year for credit and debit card use. Retailers are under tremendous pressure to not only work efficiently to meet heightened demand, but to also keep a watchful eye on their customers’ data. PhoneFactor has added several new major retail chains to our customer list, each of which will be protecting their customers’ data from the latest threats this holiday season while complying with PCI Data Security Standards. Retailers who have recently joined PhoneFactor’s customer list include New York & Company, Uno Chicago Grill, and Party City.

“After TJX and, more recently, the Heartland breach shining a spotlight on credit card data security, retailers are under a tremendous amount of pressure to protect their customers, and the PCI Data Security Standards are an important part of that,” said Steve Dispensa, PhoneFactor CTO and co-founder. “PhoneFactor enables rapid, cost-effective compliance with PCI DSS and adds a critical layer of security to prevent unauthorized access to highly sought after credit card data.”

By leveraging something every user already has — a phone — to authenticate user logins, PhoneFactor is ideal. A user simply logs in with a username and password. Instantly, his phone rings. He answers, presses # (or enters an optional PIN), and is immediately granted access. PhoneFactor also offers text messaging and voice biometric options.

Because there are no security tokens to provision and no software or certificates for end users to install, PhoneFactor can quickly be enabled for large numbers of employees at retail locations worldwide.

“PhoneFactor provided New York & Company with rapid two factor authentication for PCI DSS compliance requirements that was extremely easy for our employees and partners to use,” remarked Bill Voit, CIO. “Our IT department had it up and running in just hours and all users were able to use it within a few days.”

PhoneFactor has been part of countless PCI DSS audited customer implementations. With PhoneFactor, all user data is stored within the customer’s network and advanced logging is available for auditing purposes. In addition to meeting PCI DSS requirements for two-factor authentication, many retailers incorporate PhoneFactor’s fraud alerting capabilities into their incident response plans.

PCICompliance