Best-in-class security solution protects against POS malware and reduces the compliance scope of merchant, payment service provider, and payment gateway cardholder data environments (CDE)
May 3, 2016 – Atlanta, GA – Bluefin, the leading provider of PCI-validated Point-to-Point Encryption (P2PE) solutions for retail, healthcare and education, today announced that they will provide the Visa Data Secure Platform (DSP) through their Decryption as a Service P2PE Solution.
Visa DSP is a platform designed to help merchants prevent sensitive account holder data from being compromised by encrypting it in the PCI PTS approved Point of Sale hardware.
“The EMV Liability Shift deadline passed in October 2015. With EMV, merchants now have a tool to combat fraud in the form of counterfeit cards,” said Ruston Miles, Bluefin’s Chief Innovation Officer. “According to the 2015 Verizon Data Breach Investigations Report (DBIR), five malware events occur every second which totals 170 million malware attacks per year. With counterfeit card fraud in the rearview mirror, we are seeing merchants re-focus on data security to protect their POS systems from leaking card data to malware. Bluefin’s PCI-validated P2PE Solution and Visa’s DSP come together to provide an industry leading solution.”
Bluefin’s solutions encrypt cardholder data within a PCI P2PE ready device, preventing clear-text cardholder data from being available in an organization’s system and network where it could be accessible in the event of a data breach. This process devalues the card data rendering it useless to hackers. Card data is not decrypted until it reaches Bluefin’s decryption environment.
Approved encryption solutions listed on the PCI Security Standard Council website must adhere to strict device and chain of custody requirements. Companies that implement PCI P2PE throughout their POS environment are eligible for the 35-question SAQ P2PE – a significant reduction from the 332-question SAQ D.
Bluefin will provide the Visa DSP with PCI P2PE security platform to merchants through its network of payment gateway partners including Merchant Link, USAePay, Echosat, 3Delta Systems (3DSI), WorldNet, Anywhere Commerce, TNS, and its more than 250 ISV, SaaS, POS and ERP partners.