GS Logo
The Green Sheet, Inc

Please Log in

A Thing
View Archives

View PDF of this issue

Care to Share?

Table of Contents

Lead Story

A new chapter opens for merchant cash advance


Industry Update

Strong positions in NRF lawsuit against Durbin regs

LinkedIn confirms breach, passwords theft

First Data, SecurityMetrics settle lawsuit over data access

Academy prepares industry for EMV implementation

Trade Association News

Selling Prepaid

Prepaid in brief

Google Wallet turns one

Obopay offers license to transfer


Prepaid industry rewrites Washington playbook

Patti Murphy
ProScribes Inc.


Street SmartsSM:
How to avoid post-close mistakes

Jeff Fortney
Clearent LLC

Expanding e-commerce payments in China

Caroline Hometh
RocketPay LLC

Combating faceless fraud

Nicholas Cucci
Network Merchants Inc.

mPOS - it's about more than payments

Kevin Cola├žo
Retail Cloud

Company Profile

Cardinal Commerce Corp.

New Products

Swipe or tap, your choice

NFC Swipe
ROAM Data Inc.

Cash advance enters B2B world

B2B Cash Advance
Merchant Cash and Capital LLC


Disruption is good


The value of CQ


10 Years ago in The Green Sheet


Resource Guide


A Bigger Thing

The Green Sheet Online Edition

June 25, 2012  •  Issue 12:06:02

previous next

First Data, SecurityMetrics settle lawsuit over data access

Payment processor First Data Corp. and SecurityMetrics Inc., a provider of Payment Card Industry (PCI) Data Security Standards (DSS) compliance, resolved a lawsuit that alleged SecurityMetrics unlawfully restricted First Data's access to its customer security and reporting data. The processor accused SecurityMetrics of withholding the data in an attempt to force First Data to halt the introduction of its own PCI DSS-compliance solution. The suit was filed May 21, 2012, in the U.S. District Court in Utah.

SecurityMetrics was asked by The Green Sheet for comment on May 30, 2012, and replied by email the next day, stating, "SecurityMetrics and First Data have reached a mutual agreement to resolve the First Data Federal District Court filing on May 21, 2012." When reached for comment May 30, 2012, Elizabeth Grice, First Data Director of Communications, said the company does not comment on pending litigation. Grice was not able to confirm or comment on the agreement by press time the next day.

Reaction to a new PCI solution

In its filing, First Data told the court nothing in its contract with SecurityMetrics prevents it from introducing its own PCI compliance solution. However, First Data claimed when it began implementing its own compliance solution, SecurityMetrics informed First Data it was in violation of their contract.

SecurityMetrics then allegedly refused First Data full access to its project management and tracking portal, SecurityMetrics Merchant Compliance Console, and refused to give it access to its customers' regular and weekly reports, the processor stated. First Data also accused SecurityMetrics of certain retaliatory actions and alleged that SecurityMetrics had damaged its relationships with its customers.

Request for relief and audit

First Data's complaint asked the court for a temporary restraining order and to require SecurityMetrics to submit to an audit, stop contacting First Data customers and provide all relevant console services, PCI compliance reports, communications "made to merchants in breach of the parties' contract," and updated status reports on all First Data customers.

First Data also sought compensatory and punitive damages and attorneys' fees. Details of the settlement were not disclosed.

For additional news stories, please visit and click on "Read the Entire Story" in the center column below the latest news story excerpt. This will take you to the full text of that story, followed by all other news stories posted online.

Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.

previous next

Spotlight Innovators:

North American Bancard | Simpay | USAePay | Impact Paysystems | Board Studios