Evan Schuman's StorefrontBacktalk

Some of the state legislation doesn't even limit itself to dictating what retailers must do while operating in their states but are setting new rules protecting the residents of that state when they happen to be shopping out-of-state or online. Do they expect cashiers at Wal-Mart to ask what state a customer lives in and then, based on the answer, change the way they handle a credit card payment?Read more...

Just a couple weeks after word got out that Wal-Mart and Procter & Gamble had backed off their support for RFID tags on marketing displays comes the news that the nation’s largest drugstore chain, Walgreens, is boosting its support for the very same RFID tagging of promotional displays.

“The results have been impressive: Over the past year, our in–store execution has grown to nearly double the industry average,” said David Van Howe, purchasing VP for the $60 billion 6,658-store chain. “Store–level information about what is up and where it is in the store allows unprecedented accountability for achieving program potential.”…

The few details that have been released raise more questions than they answer, but it also provides crucial clues as to what really happened.Read more...

And both firms quickly retreated. The specifics here do not indicate a major inappropriate reaction, but the pattern is discomforting. For companies to lead the industry and stake out strong global positions--especially in a weak economy—requires bold action. That means being aggressive at times to see how far consumers and competitors will permit them to go.Read more...

The retailer initially suspected that one of its third-party payment card processors caused the problem. But in mid-January, company officials said no outside entities were to blame. Instead, they attributed the incidents to a problem with a gateway. The lack of new details makes determining precisely what happened difficult, especially when dealing with a phrase as vague as "formatting flaw" somewhere within the POS. What role did the high holiday rush traffic play? Was the system so overloaded that response times were too slow? Or was it more of a programming error, such as assuming that when more than X number of transactions are processed during any one-hour period, presume it's an attack and suspend authorizations?Read more...

Imagine my disappointment when a rudimentary runway model demo was all that this experience amounted to. Barely two-dozen short videos of models walking. And yet, just down the E-Commerce corridor sit the ghosts of what J.C. Penney might have done had the company truly wanted to show E-Commerce leadership and innovation. Had it chosen to move from mediocre to meritorious, think of the customization potential in a runway show.Read more...

One vendor is trying to get consumers to sidestep the hassle of filling out loyalty card applications at every store by integrating the functionality into a PDA.

The field test by Japan’s NTT Communication started this month, just as the vendor promised when it rolled out the program in October 2008. NTT’s new “Gyazapo” system, which uses an RFID chip in a mobile phone to carry loyalty card information for multiple retailers, can allow RFID scanners at the POS to grab shoppers’ personal information from a central database managed by NTT.…

In a proof-of-concept experiment in Bangalore, Intel India is marrying RFID tags and POS with a CRM database where “frequent customers would have their preferences and favorites recorded.” Such a system could tout related products and flag new versions of that consumer’s preferred brands.

“This system is designed to replace the current simplistic computer or other system that only provides billing and basic services,” said Sanat Rao, Marketing Director (Emerging Markets), Embedded and Communications Group, at Intel. “Our system, once implemented, allows the possibility of being operated as a kiosk and provides the information on inventory.”…

It’s been clear for a few weeks now that there has been another major credit card processor breach—above and beyond Heartland–lurking in the retail financial shadows. But the processor (along with co-conspirators Visa and MasterCard) has remained silent and, for the moment, unidentified. One report said that the breach appeared to be limited to “card not present” transactions, which certainly suggests an E-Commerce-only aspect.

StorefrontBacktalk has been in a quandary on this one for weeks, as it seemed pointless to run a story in which we couldn’t say who the processor was, how the breach happened, what the breach accessed or, well, pretty much anything else. But as more media outlets report that there has been another processor breach of some sort, staying silent started to seem ridiculous.…

Wal-Mart has historically had a strong fondness for its own homegrown apps, given the $401 billion chain’s rather absurdly large size. The company has liberalized that policy recently, allowing a few shrink-wrapped enterprise apps to slip in. Now there’s a report in Economic Times that Bentonville is seriously considering an Indian business process outsourcing contract that could include “non-core processes of procurement, merchandising, finance, accounting and payroll” and be valued at as much as $500 million.

The story quoted from a Wal-Mart document that said “Wal-Mart will expand staffing of certain elements of IT application maintenance and development with some of India’s leading information technology firms. India is one of several countries that the company is targeting as part of its remote sourcing model for IT activities.” Vendors in the running, the story said, include IBM, TCS, WNS and Wipro.…

Given P&G's reputation for ROI worship, many assumed the company pulled the plug because RFID was failing the test. What is closer to the truth is that the test failed, not the technology. And to the extent that Wal-Mart was as much a player in this trial as P&G, it could also be said that the test didn't fail, the tester did.Read more...

The orders between the chain, the Federal Trade Commission (FTC) and the U.S. Department of Human Services followed a probe that found workers at the company's pharmacies tossed into open garbage dumpsters many items containing highly sensitive consumer medical information.Read more...

Overall, the American Customer Satisfaction Index (ACSI) climbed 0.9 percent to 75.7 on the 100-point scale during the quarter, compared with the same period in 2007. "Very few economic indicators show positive signs these days," said Claes Fornell, who heads the ACSI. "The American Customer Satisfaction (for in-store) is one of them."Read more...

Even though no retailers were involved in that particular incident, the implications of this attack technique must be thought through. What the thieves did was to take the fundamental security of time and flip it around.Read more...

Given that it has one of the oldest names in retail, it’s impressive how Sears is repeatedly on the cutting edge of technology. ServiceLive, introduced this month, is another good example why. Instead of trying to sell products directly, it tries to connect homeowners with contractors and takes a cut of the action.

Here’s how the Sears-described process works: Users review and select pre-screened service providers in their area and then describe a repair or improvement project in detail, including the price they want to pay and their desired appointment time. The project is then routed to selected providers after the user uploads funds to his or her ServiceLive account. The first provider to accept the terms electronically wins the project.…

What made this case interesting is that the suspects are accused of having tried a new twist to credit card fraud. Typically, fraudsters take stolen credit card numbers and create bogus documents by stamping out the cards from plastic. In this case, the suspects didn't have to create bogus credit cards at all. It also meant that they weren't required to show any identification when using the gift cards.Read more...

The statement said the "attacker methodology" was to identify sites that seem vulnerable to SQL injection and that the attackers "appear to target MSSQL only." (How nice. The cyber thieves run Microsoft-only shops. Redmond would be proud.)Read more...

The researchers found that 57 percent of the retailers they categorize as "laggards" in terms of adopting price localization cited their technology infrastructures as being a "gating factor" preventing them from delivering differentiated pricing. Forty-seven percent of the companies RSR labels "winners," those with average sales growth of three percent, told RSR that technology was impeding their localized pricing desires. "It's the entire technology infrastructure, particularly the integration bus," said RSR Managing Partner Paula Rosenblum.Read more...

Regardless of what Best Buy ends up doing, in today's rock-bottom economy, with its mergers and bankruptcies, the retail concept of data ownership is getting quite a workout. For example, CompUSA closed its doors but has now reemerged in a very different form in Florida. And there's no telling where the petabytes (exabytes?) of customer information now controlled by Circuit City will wind up. From a privacy perspective, there are even scarier possibilities than someone's music or computer purchases falling into the wrong hands.Read more...

The number of financial institutions hit by the data breach at Heartland Payment Systems is now 440 and still rapidly climbing, according to a Thursday (Feb. 12) report from Bank Info Security. Bermuda, Canada and Guam banks were added to the list Wednesday, the story said.

That story also pointed to a wonderful Web poll (so it’s constantly updated) being done at the Independent Community Bankers of America site. Such polls are notoriously suspect, because there’s no way to verify the accuracy of answers or even if the respondents are who they say they are. With that caveat, the polls on Tuesday (Feb. 10) night showed that 83 percent of banks said they had been affected by the Heartland breach, compared with 4 percent who said they hadn’t and 12 percent who said they “don’t know yet.” Even more interesting is that the numbers overwhelmingly pointed to debit—as opposed to credit—card issues. That 83 percent figure broke down to 60 percent saying debit cards were impacted, only 2 percent saying credit cards were impacted and 21 percent saying both credit and debit cards were impacted.…

Earlier this month, CSPI published an "Open Letter to Food Retailers" in which it praises retailers such as Costco and Wegman's that mined their loyalty card data to find out, and make phone calls to, customers who bought recalled peanut-based products. Read more...

The change in heart, driven by new CEO Ron Marshall, will almost immediately force Border's E-Commerce team to halt additional investments. Although the move certainly reflects a new top management strategy that does not see E-Commerce making much money for the company anytime soon—a regrettably realistic assessment—it also is part of a pragmatic strategy of pouring every possible resource into the brick-and-mortars while simultaneously implementing chain-wide—and very deep--budget cuts.Read more...

These systems illustrate the advances being made in face recognition for retail applications as the technology evolves from the realm of discussion to the reality of the store, sidewalk and mall corridor. For retailers, the goal is targeting advertising to those consumers most likely to be engaged. But the effort is running headlong into some sticky ethical questions involving personal privacy. What will happen if face-recognition-powered digital signs and kiosks are able to learn the identities of shoppers merely by scanning their faces and matching those images against known consumer images? Read more...

Heartland had tried keeping those names confidential, an effort that was succeeding prior to the Wednesday, Feb. 4 issue of The Nilson Report. That newsletter also quoted from a MasterCard alert, which provided new details about what was taken and when. Read more...