B&B Theatres recently hired Trustwave, a leading managed security services provider (MSSP), to investigate an alleged credit card data breach that may have stretched on for roughly two years. The theatre, headquartered in Gladstone, Missouri, operates more than 370 screens across 47 locations.
After a banking partner alerted B&B Theatres about alleged breach activity, the theater chain hired Trustwave to work with B&B's internal IT team to "contain the breach and mitigate any further potential penetration,” according to a statement sent to KrebsOnSecurity. The investigate uncovered malware on B&B systems that dates back to 2015, but the theatre chain downplayed the potential risks and fallout from that two-year window of exposure.
B&B apparently has not posted an alert about the breach on the company's news site. MSSP Alert has reached out to the theater chain to see if or how it plans to alert customers about the issue.
Trustwave's MSSP Reputation
Trustwave is well-known and widely respected across the MSSP industry. The company has landed in both the Forrester Wave and Gartner Magic Quadrant reports of top MSSPs for customers to consider. Trustwave has nine global security operations centers (SOCs), and the company's security services extend to protect more than 3 million businesses across 96 countries.
Singapore Telecommunications Ltd (Singtel), an Asia-based communications company, acquired Trustwave in 2015 but continues to run the MSSP as a standalone business unit within the Singtel Group Enterprise unit.
MSSP Alert expects to meet with Trustwave at the Black Hat USA 2017 conference later this month in Las Vegas. The MSSP has not publicly commented on the B&B engagement.