Cyber Risks · Krebs on Security

Skimmers Found at Some Calif., Colo. Safeways

Summary: Sources at multiple financial institutions say thieves compromised credit card terminals at checkout lanes in several Safeway stores in California and Colorado, with bank industry sources tracing the fraud to Colorado locations in Arvada, Conifer, Denver, Englewood and Lakewood and suspecting Castro Valley and Menlo Park in California, linked to debit card use since early September 2015. Safeway spokesperson Brian Dowling said the fraud was limited to a handful of stores and that the company inspects its PIN pads regularly and contacts law enforcement when skimmers are found, while the Denver Post later reported the incident affected three Colorado stores and that all affected lanes were self-checkout lanes.

Bottom line: Thieves had to open up or swap out the card terminals at each checkout lane to capture PINs and account data, and skimming at retail checkout lanes generally involves someone on the inside - a reminder that the point-of-sale hardware in your own stores is an attack surface, not just the network behind it.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related