Cardholder Data: Pennsylvania Court Approves Breach Settlement

After hackers used credit card-stealing malware on a chain of convenience store/gas stations over a 9 month period, impacting millions of customer payment records, the company has agreed to pay up to $9 million in cash and gift cards to class members and $3.2 million in legal fees and other expenses; the company also agrees to implement annual third-party security assessments, penetration testing and remediation, payment data encryption, EMV security procedures, and a written security program.