Sally Beauty Card Breach, Part Deux?
Summary: Sally Beauty Holdings said it is investigating reports of unusual payment card activity at some U.S. stores, the second such probe in a year, after KrebsOnSecurity heard from multiple financial institutions about fraudulent charges on cards recently used at Sally Beauty locations. In March 2014 the chain confirmed a network breach it said involved fewer than 25,000 card accounts, while a later analysis of store ZIP codes on cards sold at Rescator tied the incident to virtually all 2,600-plus locations.
What you should know: A company that confirmed a card breach in 2014 and told customers security was its number one priority is now investigating the same pattern again, and its earlier public count of fewer than 25,000 affected accounts did not match the nationwide footprint the resold cards pointed to.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026