weather icon Mostly Cloudy

Despite tech gains, small Nevada businesses face data-safety risks

At the Ghost Town Art & Coffee Co. in Pioche, owner Kelly Garni takes payment for two burgers and a Coca-Cola by sliding a Visa card through a small dongle attached to his Samsung S6 mobile phone.

In short order, Garni and other businesses — big and small — will be able to carry out customer transactions without using cards.

The advancement in payment technology improves the experience for customers and business owners alike. Garni not only can use his phone to accept payment for food and beverage at his five-table cafe, but also for the artwork he sells in Las Vegas.

“The beauty of the whole thing is that it’s surprisingly easy to set up,’’ said Garni, who estimates about 80 percent of all his transactions are made by card. “It couldn’t be any easier and you can be very mobile.’’

However, the improvement in payment technology still comes with data-safety risks that can cripple a small business. Protecting and educating small business owners like Garni was a key theme at the Payment Card Industry Security Standards Council’s annual North American conference held this week in Las Vegas.

The PCI Security Standards Council develops card payment industry standards to ensure that transactions made on Garni’s phone or at a McDonald’s kiosk are secure.

The three-day show attracts 1,400 professionals from various segments of the payment industry, including credit card companies and hardware and software vendors as well as individuals qualified by the PCI Security Standards Council to set up and assess payment systems.

Attendees come to learn about standard updates for existing payment solutions and progress on standards for emerging payment methods like contactless transactions.

Breaches common

Hackers frequently attack large companies because they are seeking financial gains, according to a presentation by Christopher Novak, director of investigative response for Verizon Enterprise Solutions. However, breaches are common at small merchants because they generally do not have the financial resources for an IT department.

Garni is typical of many small merchants, wearing the hat of owner, chief technology officer and janitor.

To assist such business owners in grasping the basics, the PCI Security Standards Council in August updated its Data Security Essential Resources for Small Merchants. The new guide includes a payment system evaluation tool that spells out how owners can protect their particular payment system from a breach.

The council has teamed up with the National Restaurant Association, Chambers of Commerce and other organizations to inform small businesses about Data Security Essential Resources and its evaluation tool.

PCI Security Standards Council Chief Technology Officer Troy Leach said small businesses often use third-party vendors, known as integrators and resellers, to install payment software.

The vendors sometimes create a weak password, disable security features like firewalls or don’t upgrade software patches, leaving the small business vulnerable to an attack, he said.

‘Very basic problems’

Las Vegas-resident Tom Arnold, vice president of PSC, a firm specializing in payment security, agreed.

“A large number of the small mom and pop shops look first to the integrators to help them to do this because they are more interested in boiling the spaghetti and not what is going on in the payment terminal,” said Arnold, who attended the conference.

Arnold’s firm assesses the security of payment technology for companies ranging from a single restaurant up to large resorts and multinational companies. PSC also carries out forensic investigations for companies once their payment data system has been breached.

Arnold said his assessors still come across “very basic problems” when analyzing payment systems that are installed and serviced by third-party integrators.

Poor credit card encryption at the point of sale is “still a huge problem,” he said.

Some integrators are themselves vulnerable to breaches, opening the doors for hackers to attack the payment systems of the small businesses they support, he added.

Amid industry concern, the PCI Security Standards Council in 2012 created the qualified integrator and reseller designation to raise the quality of people installing and managing payment software. The designation also helps small businesses choose a specialist. There are 10 qualified integrators in Nevada, according to the PCI Security Standards Council.

Mark Weiner, founder and chief operating officer of Reliant, a data security solutions provider, said he has seen improvement in industry standards, including in credit card data encryption, since the PCI Security Standards Council began qualifying integrators.

New York-based Reliant was the first company to be qualified as an integrator in 2013.

“The council has done a good job of clearing up that problem,” said Weiner, who also attended the conference.

Contact Todd Prince at 702-383-0386 or tprince@reviewjournal.com. Follow @toddprincetv on Twitter.

A previous version of this story incorrectly identified Mark Weiner.

Don't miss the big stories. Like us on Facebook.
Business Videos
How much do Las Vegas casino CEOs make?
Las Vegas gaming CEOs made anywhere between $1 million and $24 million last year, according to company filings with the U.S. Securities and Exchange Commission. ((Las Vegas Review-Journal)
30-year-old Rio needs a little TLC
Nearly 30 years after the Rio opened, the red and blue jewel that helped catapult Las Vegas to a new level with its buffet and nightclub has lost its status along with its shine.
The latest on the Drew Las Vegas - VIDEO
Eli Segall recounts his tour of the Drew Las Vegas, formerly the Fontainebleau, on the Las Vegas Strip. (Michael Quine/Las Vegas Review-Journal)
Pinball Hall of Fame to move near south Strip
Operators of the Pinball Hall of Fame have been approved to build a new, larger arcade near the south edge of the Strip on Las Vegas Boulevard near Russel Road. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
National Hardware Show underway Las Vegas
The National Hardware Show kicked off Tuesday at the Las Vegas Convention Center (Mat Luschek / Review-Journal)
Caesars for sale?
Caesars Entertainment Corp. has been swept up in takeover speculation since the company’s share price tumbled last year amid disappointing earnings and concerns over a recession. Amid the decline, hedge funds scooped up shares. Billionaire activist investor Carl Icahn began buying shares of Caesars as early as January. Icahn acquired nearly 18 percent by mid-March. In February Icahn called on the Caesars board to study a sale as a way to boost shareholder value.
Las Vegas home prices
Las Vegas home prices grew fastest among major markets in February for the ninth straight month. But amid affordability concerns, the growth rate has slowed down. Southern Nevada prices in February were up 9.7% from a year earlier, according to the latest S&P CoreLogic Case-Shiller index. The last time Las Vegas' price growth fell below 10% was in September 2017, S&P Dow Jones Indices reported.
Free Parking Coming To Wynn
Free parking will come to the Wynn and Encore resorts on May 1, 2019. (Mat Luschek / Review-Journal)
Founding Venetian employees talk about 20 years at the Strip resort
The Venetian, which opened May 3, 1999, is celebrating 20 years on the Las Vegas Strip. Seven original employees talk about opening the luxury resort and working there for two decades. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Circa aiming for December 2020 opening
The 1.25-million-square-foot property will have 44-stories and 777-rooms. It will also have a separate nine-story, 1,201-space parking garage.
Boxabl official explains the building concept
Boxabl business development manager Galiano Tiramani shows off a room built by his company. (Blake Apgar/Las Vegas Review-Journal)
TI/Mirage Tram reopens
The tram that shuttles guests between TI and Mirage reopened this week after being closed for much of 2018.
Las Vegas Convention Center expansion taking shape
Renderings and actual footage show how the Las Vegas Convention Center is evolving.
Former Starbucks CEO Howard Schultz at Las Vegas convention
Former Starbucks CEO and potential presidential candidate Howard Schultz spoke at the Epicor Insights user conference at Mandalay Bay Convention Center Wednesday, April 17, 2019. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Drew Las Vegas to open in the second quarter of 2022
The 67-story Drew Las Vegas is slated to open in the second quarter of 2022 at the north end of the Las Vegas Strip. (Michael Quine/Las Vegas Review-Journal)
NAB Day 1 (Time Lapse)
NAB kicked off at the Las Vegas Convention Center on Monday, April 8, 2019. (Mat Luschek / Review-Journal)
National Association of Broadcasters Show shows 1mm thick 8K TV with 22.2 channel digital sound
Japan’s NHK Science & Technology Research Laboratories booth featured a 1mm thick 8K TV system used in conjunction with a 22.2 channel digital sound system at the National Association of Broadcasters Show at the Las Vegas Convention Center. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Nevada shoppers react to Smith’s no longer accepting Visa credit cards
On March 1, Smith’s announced that it would no longer be accepting Visa credit cards at any of its 142 supermarkets, including the 45 in Nevada.
Massachusetts Gaming Commission asks how long Wynn executives knew about misconduct
Business reporter Rick Velotta gives an update on the adjudicatory hearing on the suitability of Wynn Resorts to retain its gaming license in Massachusetts.
Henderson app developer part of Startup in Residence
Henderson based developers of the app On Point Barricade are taking part in Startup in Residence, a North America program dedicated to pairing tech companies with governments. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Sam's Town employees and customers talk of their love for the iconic casino
Longtime Sam's Town employees and customers love each other and love their casino. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Las Vegas apartments rents
Las Vegas’ apartment market has accelerated in recent years. Developers are packing the suburbs with projects, landlords are on a buying spree, and tenants have filled buildings.
William Boyd talks about the birth of Sam's Town
On the eve of the 40th anniversary of Sam's Town, William Boyd, executive chairman of Boyd Gaming and son of hotel namesake Sam Boyd, talks about how the casino became one of the first local properties in Las Vegas. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
High Roller observation wheel turns five
The world’s tallest observation wheel celebrates it’s fifth year on Sunday, March 31, 2019. (Michael Quine/Las Vegas Review-Journal) @Vegas88s
Escape Room Industry Growing In Las Vegas
Escapology employees discuss the growing escape room industry in the U.S. and Las Vegas. (Bailey Schulz/Las Vegas Review-Journal)
Impact of parking fees on visiting the Las Vegas Strip
There are no data showing a relationship between Strip resort and parking fees and the number of out-of-state visitors to Las Vegas. But there are data showing a relationship between Strip parking fees and the number of local visitors to the the Strip. ‘’As a local, I find myself picking hotels I visit for dinner or entertainment, based on whether they charge for parking or not,”’ said David Perisset, the owner of Exotics Racing. ‘’It is not a matter of money, more of principle.’’ A 2018 survey by the Las Vegas Global Economic Alliance found 36.9 percent of Clark County residents reported avoiding parking at Strip casinos that charge for parking. 29.1 percent reported avoiding using any services from a Strip casino that charges for parking.
MGM's sports betting deals
MGM Resorts International signed a sports betting sponsorship agreement with the NBA in July It was the first professional sports league to have official ties with a legal sports betting house. The deal came just two months after the U.S. Supreme Court overturned a law prohibiting sports betting in most states. In October, MGM became the first gaming company to sign a sports betting partnership with the NHL. In November, MGM became the first gaming company to sign a sports betting partnership with the MLB. Financial terms of Tuesday’s deal and earlier partnerships have not been announced.
Faraday puts Las Vegas land on the market
Nearly two years after Faraday Future bailed on its North Las Vegas auto factory, the company has put its land up for sale. (Michael Quine/Las Vegas Review-Journal)
El Cortez owner Kenny Epstein on running the iconic property
Kenny Epstein, owner of the El Cortez Hotel in downtown Las Vegas, talks about Jackie Gaughan mentorship and answers rumors about bodies in the basement at the mob-era casino. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
LVCVA recommends construction of underground people mover
The Las Vegas Convention and Visitors Authority announced the recommendation for an underground people mover for the convention center. The system would have the potential to expand and connect Downtown and the resort corridor all the way to McCarran. (Michael Quine/ Las Vegas Review-Journal)