Credit Card Breach at America’s Thrift Stores
Summary: America's Thrift Stores said it was hit by a malware-driven breach that targeted software used by a third-party service provider, giving criminals from Eastern Europe unauthorized access to some payment card numbers. The company said the U.S. Secret Service told it only card numbers and expiration dates were stolen, with possible exposure for sales transactions between September 1 and September 27, 2015, though banking sources reported fraud on cards used at its locations consistent with counterfeiting.
What's compelling: The stolen data was enough for thieves to counterfeit new cards, and the entry follows a similar incident at Goodwill tied to weaknesses at third-party payment vendor C&K Systems - with no indication yet which provider was at fault here.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026