Primary Account Number (PAN) Masking & Truncation

LBE PAN Masker                 

LBE PAN Masker automatically masks Primary Account Numbers (e.g. credit card numbers) within:

• MS Outlook Contacts, Emails, Notes, Tasks and Calendars.
• Common MS Outlook attachments ( .txt, .csv, .htm, .html, .xls, .xlsx, .doc, .docx) in Contacts, Emails, Notes, Tasks and Calendars.
• Common document files:( .txt, .csv, .htm, .html, .xls, .xlsx, .doc, .docx) on a local or network hard drive.
  

The problem

Your customer-facing systems will have built in number-masking. BUT - your company servers probably contain many thousands (maybe millions) of emails and documents, any of which might contain customer primary account numbers. Checking those emails and documents manually would take thousands of man-hours - an impossible task and one which simple searches would not reveal due to the complex pattern-matching needed.

The Solution

LBE PAN Masker will search through documents, emails, contacts, notes, calendar items, looking for a sequence of digits which match the patterns you specify via a simple spreadsheet. LBE PAN Masker will replace sections of that number with e.g. a "*" character. Even if those numbers contain embedded space(s) or newlines.

If you have any dealings with customer credit card, debit card or bank account details you need LBE PAN Masker.

Payment Card Industry Data Security Standard (PCI DSS) applies to all organisations (merchants and service providers) that transmit, process or store payment card data. Section 3.4 requires you to at minimum

Protect Cardholder Data - Requirement 3 Protect stored cardholder data:

3.4 Render PAN, at minimum, unreadable anywhere it is stored (including on portable digital media, backup media, in logs) by using any of the following approaches

1.One-way hashes based on strong cryptography
2.Truncation
3.Index tokens and pads (pads must be securely stored)
4.Strong cryptography with associated key management processes and procedures

More info from PCI DSS:

Why Comply with PCI Security Standards?

Getting Started

FAQs