A Las Vegas based casino operator has sued Trustwave for failure to protect the company from a breach that resulted in credit card theft, allowing the hackers to maintain their foothold during the investigation period.
The lawsuit was filed by Affinity Gaming in US district court in Nevada. This is the first case where a client challenges an IT security firm over the quality of its investigationfollowing a hacking attack.
According to Affinity Gaming, they hired the services of Trustwave to study and clean up the network intrusions compromise customers” credit data.
It was reported that the hackers gained accessed to more than 300,000 credit card details Affinity”s customers in restaurants and hotels.
Trustwave reported that it has identified the source of the data breach and contained the malware responsible for the attack.
However after a year, Affinity was again hit by a second payment breach. Mandiant, the competitor of Trustwave reported that the malware was not fully removed in the system.
Affinity gaming is seeking $100,000 in damages.
In response to Affinity”s accusations Trustwave spokesperson told the Financial Times (FT) on Friday, “We dispute and disagree with the allegations in the lawsuit and we will defend ourselves vigorously in court.”