Security Assessor Sued in CardSystems Breach: Merrick Bank v. Savvis
I had missed the original filing of this complaint, but have now been able to obtain a copy of it. Essentially a lawsuit by a bank against Savvis for allegedly making a mistake in certifying CardSystems as CISP compliant. The complaint alleges $16 milion in damages, which essentially are the amounts that Merrick (acquiring bank) paid to the various card associations to satisfy claims by issuing banks arising out of the CardSystems breach. The compliant was filed in May 2008, so it is somewhat odd that news outlets are just now reporting it.