Staples: 6-Month Breach, 1.16 Million Cards
Summary: Staples acknowledged a malware intrusion at 119 stores between April and September 2014 that may have exposed as many as 1.16 million customer credit and debit cards. The company said malware may have allowed access to purchase data at 113 stores from August 10 through September 16, 2014, and at two stores from July 20 through September 16, 2014, while fraudulent card use was reported at four Manhattan stores from April through September.
Why it matters: Seculert CTO Aviv Raff put the per-store minimum time to detect and respond at an average of 40 days, and the attackers were not the group thought to have hit Target and Home Depot but were tied to criminal infrastructure seen in the Michaels breach.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026