Point-of-Sale Vendor NEXTEP Probes Breach
Summary: NEXTEP Systems, a Troy, Mich.-based point-of-sale vendor serving restaurants, cafeterias, casinos and airports, was notified by law enforcement that systems at some of its customer locations may have been compromised, KrebsOnSecurity reported. The acknowledgement followed financial industry reports of fraud on cards recently used at Zoup, a 75-location soup chain that runs NEXTEP devices across its entire estate; NEXTEP President Tommy Woycik said the company does not believe all customers are affected and that the extent of the breach is not yet certain.
Key Takeaway: A POS vendor breach spreads across every merchant running its terminals, and the article's comparison cases show the scale: C&K Systems ran 18 months and hit some 330 Goodwill locations, while Signature Systems reached at least 100 independent restaurants. Stolen card data sells for $20 to $100 per card, and Krebs notes prior vendor breaches often began with stolen credentials for remote administration of POS systems.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026