Natural Grocers Investigating Card Breach
Summary: Financial industry sources told KrebsOnSecurity that card fraud patterns suggest hackers breached cash registers at Natural Grocers locations nationwide, and a source with inside knowledge said attackers entered just before Christmas 2014 through weaknesses in the company's database servers, moved laterally through the internal network, and planted card-snooping malware on point-of-sale systems. Natural Grocers said it hired a third-party forensics firm, that law enforcement is investigating, that it has received no reports of fraudulent card use, and that it is installing a PCI-compliant point-to-point encryption system with chip-and-PIN pads at all 93 stores in 15 states.
Bottom line: The company's fix targets the point-of-sale terminals, but the reported entry point was the database servers, and commenters on the piece note that encryption at the terminal does nothing against a keylogger or against an attacker who already reached the database.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026