Visa has announced that Heartland Payment Systems and RBS Worldwide, a subsidiary of Royal Bank of Scotland, have been pulled from the list of merchant processors compliant with industry data security standards.

"Recently, Heartland Payment Systems and RBS WorldPay publicly disclosed unauthorized access to their systems resulting in the compromise of card account information from all major card brands. Based on compromise event findings, Visa has removed Heartland and RBS WorldPay from its list of PCI DSS compliant service providers," the brand announced.

"Heartland and RBS WorldPay are actively working on revalidation of PCI DSS compliance using a Qualified Security Assessor. Visa will consider relisting both organizations following their submissions of their PCI DSS reports on compliance," Visa added.

Recommended For You

Heartland called the move "probation" and said it planned to be back on the compliant list by May after undergoing another compliance review and audit.

NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.