Despite tech gains, small Nevada businesses face data-safety risks

At the Ghost Town Art & Coffee Co. in Pioche, owner Kelly Garni takes payment for two burgers and a Coca-Cola by sliding a Visa card through a small dongle attached to his Samsung S6 mobile phone.

In short order, Garni and other businesses — big and small — will be able to carry out customer transactions without using cards.

The advancement in payment technology improves the experience for customers and business owners alike. Garni not only can use his phone to accept payment for food and beverage at his five-table cafe, but also for the artwork he sells in Las Vegas.

“The beauty of the whole thing is that it’s surprisingly easy to set up,’’ said Garni, who estimates about 80 percent of all his transactions are made by card. “It couldn’t be any easier and you can be very mobile.’’

However, the improvement in payment technology still comes with data-safety risks that can cripple a small business. Protecting and educating small business owners like Garni was a key theme at the Payment Card Industry Security Standards Council’s annual North American conference held this week in Las Vegas.

The PCI Security Standards Council develops card payment industry standards to ensure that transactions made on Garni’s phone or at a McDonald’s kiosk are secure.

The three-day show attracts 1,400 professionals from various segments of the payment industry, including credit card companies and hardware and software vendors as well as individuals qualified by the PCI Security Standards Council to set up and assess payment systems.

Attendees come to learn about standard updates for existing payment solutions and progress on standards for emerging payment methods like contactless transactions.

Breaches common

Hackers frequently attack large companies because they are seeking financial gains, according to a presentation by Christopher Novak, director of investigative response for Verizon Enterprise Solutions. However, breaches are common at small merchants because they generally do not have the financial resources for an IT department.

Garni is typical of many small merchants, wearing the hat of owner, chief technology officer and janitor.

To assist such business owners in grasping the basics, the PCI Security Standards Council in August updated its Data Security Essential Resources for Small Merchants. The new guide includes a payment system evaluation tool that spells out how owners can protect their particular payment system from a breach.

The council has teamed up with the National Restaurant Association, Chambers of Commerce and other organizations to inform small businesses about Data Security Essential Resources and its evaluation tool.

PCI Security Standards Council Chief Technology Officer Troy Leach said small businesses often use third-party vendors, known as integrators and resellers, to install payment software.

The vendors sometimes create a weak password, disable security features like firewalls or don’t upgrade software patches, leaving the small business vulnerable to an attack, he said.

‘Very basic problems’

Las Vegas-resident Tom Arnold, vice president of PSC, a firm specializing in payment security, agreed.

“A large number of the small mom and pop shops look first to the integrators to help them to do this because they are more interested in boiling the spaghetti and not what is going on in the payment terminal,” said Arnold, who attended the conference.

Arnold’s firm assesses the security of payment technology for companies ranging from a single restaurant up to large resorts and multinational companies. PSC also carries out forensic investigations for companies once their payment data system has been breached.

Arnold said his assessors still come across “very basic problems” when analyzing payment systems that are installed and serviced by third-party integrators.

Poor credit card encryption at the point of sale is “still a huge problem,” he said.

Some integrators are themselves vulnerable to breaches, opening the doors for hackers to attack the payment systems of the small businesses they support, he added.

Amid industry concern, the PCI Security Standards Council in 2012 created the qualified integrator and reseller designation to raise the quality of people installing and managing payment software. The designation also helps small businesses choose a specialist. There are 10 qualified integrators in Nevada, according to the PCI Security Standards Council.

Mark Weiner, founder and chief operating officer of Reliant, a data security solutions provider, said he has seen improvement in industry standards, including in credit card data encryption, since the PCI Security Standards Council began qualifying integrators.

New York-based Reliant was the first company to be qualified as an integrator in 2013.

“The council has done a good job of clearing up that problem,” said Weiner, who also attended the conference.

Contact Todd Prince at 702-383-0386 or tprince@reviewjournal.com. Follow @toddprincetv on Twitter.

A previous version of this story incorrectly identified Mark Weiner.

ad-high_impact_4
Business
The Mansion at MGM boasts hidden luxury
The Mansion at MGM, a hotel within a hotel, features 29 luxury villas for invited guests only. (K.M. Cannon/Las Vegas Review-Journal)
Goodwill of Southern Nevada
Under CEO John Helderman, Goodwill of Southern Nevada has expanded its services including the new home of Goodwill’s Veteran Integration Program. Free job services are paid for by revenues generated by Goodwill's retail stores. In 2017, the sale of donated goods allowed Goodwill of Southern Nevada to train more than 17,000 job seekers. More than 2,500 of those found local jobs. (Las Vegas Review-Journal)
Little bat company on verge of MLB deal
Larry Thein, part owner and one of only three employees of the Tat2 Bat Company of Davenport, Iowa, made the company's first bat in a hog barn. He spoke of the humble origins during a trade show at the Baseball Winter Meetings in Las Vegas, Nev., on Dec. 12, 2018. (Ron Kantowski/Las Vegas Review-Journal)
Texas Roadhouse opens in North Las Vegas
Texas Roadhouse has opened at on Craig Road at Bruce Street in North Las Vegas as part of an emerging "restaurant row." (K.M. Cannon/Las Vegas Review-Journal)
Holiday Parade Lights Up Downtown Summerlin
Holiday parade lights up Downtown Summerlin every Friday and Saturday night through Dec. 22.
Nevada's solar industry on the rebound
In 2015, the Nevada Public Utilities Commission voted in favor of a new tariff structure that reduced net energy metering buyback rates and increased fix fees for residential solar customers.
Apartment complexes selling fast in Las Vegas
Las Vegas’ apartment vacancy rate is among the smallest in the country, and rents are climbing faster than the national average. (LVRJ)
Aristocrat Opens $45M Campus In Summerlin
Aristocrat Technologies Chairman Ian Blackburne discusses the company's growth. (LVRJ)
Sunrise Hospital celebrates 60 years
Sunrise Hospital opened its doors to patients on Dec. 15, 1958. Employees of more than 35 years celebrated at a luncheon Wednesday, Dec. 12, 2018. Jessie Bekker/ Las Vegas Review-Journal.
Maya Cinemas to open soon in North Las Vegas
Moctesuma Esparza, CEO of Maya Cinemas, talks about the newest location in North Las Vegas, set to open Jan. 10. The aim of the theatre chain is to serve latino-centric, underserved communities.
Holiday shopping and returns make this the busiest time of year for UPS
The UPS Las Vegas South facility is the company's busiest pre-load operation in the country, and it's even busier this time of year. (K.M. Cannon/Las Vegas Review-Journal)
Primm’s outlet mall has fallen on hard times
The mall, attached to Primm Valley Resort, opened in 1998. Back then, it was a “textbook, perfect outlet-center location." But now, Primm’s outlet mall has fallen on hard times. Las Vegas Boulevard has endless shopping spots. And there are other outlet malls that don’t require a hefty drive to the state line. Its mortgage-holder foreclosed on the mall in late September.
Miltary auction at Ritchie Bros. Auctioneers
Humvees, ammo cans, construction equipment, field gear and more is on the auction block Friday and Saturday at Ritchie Bros. Auctioneers. About 10,000 items in all are for sale in what GovPlanet bills as the largest auction of its kind.
Las Vegas residents discuss avoiding holiday scams
Las Vegas residents discuss their donation habits and how they avoid giving money to scam charities during the holiday season. (Bailey Schulz/Las Vegas Review-Journal)
Tesla’s Nevada Gigafactory ahead of economic impact expectations
The Tesla Gigafactory’s economic impact on Nevada has exceeded projections, bringing in more than 7,000 jobs. In 2014, Nevada agreed to give the automotive and energy company $1.3 billion in tax abatements. In return, Tesla promised to meet certain requirements in areas like employment and capital investment. As of June, Tesla has brought in a total of $6.05 billion in capital investment, surpassing the $4.95 billion projection. The original contract gave the company until 2024 to make $3.5 billion in capital investments in Nevada. Derek Armstrong, deputy director of the Governor’s Office of Economic Development.
Land sales near the Las Vegas Raiders stadium
Land around the Las Vegas stadium site has been selling for high prices. A few months before the stadium’s groundbreaking, Global Trust Group acquired a 2.5-acre parcel just north of the stadium site. The property sold for $7.25 million, or $2.9 million an acre. Osprey Real Estate Capital and Huntington Hotel Group acquired a 2-acre industrial site just west of the stadium site in late November. The property sold for $6.5 million, or $3.15 million per acre. That's roughly 12 times the average price of land in the valley this year as tracked by Colliers International.
T-Mobile Tech Experience Truck parks in Toshiba Plaza at T-Mobile Arena
The Tech Experience Truck is a state-of-the-art showroom on wheels, with demonstrations that put connected drones, smart cities, augmented/virtual reality and smart tracking. The exhibit shows new wireless technology – including 5G and the Internet of Things (IoT). (K.M. Cannon/Las Vegas Review-Journal)
Steve Siegel, CEO of the Siegel Group, speaks about helping families and other needy residents
Steve Siegel, CEO of the Siegel Group, speaks about helping families and other needy residents to keep them from teetering off into homelessness. Bizuayehu Tesfaye/Las Vrgas Review-Journal @bizutesfaye
Crowds camp out for Chick-fil-A opening
Dozens of customers camped out 24 hours ahead of the 6 a.m. Thursday opening of the new Chick-fil-A on Rainbow Blvd.
Cheapest listings for sale in Las Vegas
Listed for $39,990, 585 S. Royal Crest Circle, Unit #9 is one of the cheapest homes currently listed for sale in Las Vegas. (Caroline Brehman/Las Vegas Review-Journal)
MGM's sports betting deals
MGM Resorts International signed a sports betting sponsorship agreement with the NBA in July It was the first professional sports league to have official ties with a legal sports betting house. The deal came just two months after the U.S. Supreme Court overturned a law prohibiting sports betting in most states. In October, MGM became the first gaming company to sign a sports betting partnership with the NHL. In November, MGM became the first gaming company to sign a sports betting partnership with the MLB. Financial terms of Tuesday’s deal and earlier partnerships have not been announced.
Terry Miller discusses Convention Center
Project Manager Terry Miller explains the phases of Convention Center construction.
Zappos treats their team members on Cyber Monday
Zappos rolls out a variety of food, drinks and special activities for all team members at their downtown Las Vegas headquarters for Cyber Monday. (K.M. Cannon/Las Vegas Review-Journal)
Team Hybrid at the 2019-Model Motor Trend International Auto Show
Among the companies showing off the 2019 model cars, Team Hybrid shows off its modified cars. Las Vegas resident David David talks about the team, which is in its ninth year exhibiting at the show, and his show car.
Black Friday Shoppers at downtown Summerlin and at the Arsenal
Black Friday shoppers at downtown Summerlin and at the Arsenal. Bizuayehu Tesfaye/Las Vegas Review-Journal @bizutesfYe
Black Friday shopping in Las Vegas
Black Friday sale shopers express their shopping experience. Bizuayehu Tesfaye/Las Vegas Review-Journal @bizutesfaye
Las Vegas Livestock recycling Strip food waste
Las Vegas Livestock collects and recycles food from many Las Vegas Strip companies. (Nicole Raz/Las Vegas Review-Journal)
Black Friday at Fry's
Shoppers line up for deals early on Black Friday at Fry's Electronics on Las Vegas Boulevard South. (Mat Luschek/Las Vegas Review-Journal)
Black Friday shoppers at Best Buy at 5 am
Black Friday shoppers at Best Buy at 5 am on Nov. 23. (Mat Luschek/Las Vegas Review-Journal
Black Friday - 1am Closing Time
Quiet night.
TOP NEWS
News Headlines
ad-infeed_1
ads_infeed_2
Local Spotlight
Home Front Page Footer Listing
Circular
You May Like

You May Like