Cyber Risks · Krebs on Security

Bebe Stores Confirms Credit Card Breach

Summary: Bebe stores confirmed that hackers stole customer card data from stores across the U.S., Puerto Rico and the U.S. Virgin Islands between Nov. 8 and Nov. 26, 2014, in a breach that persisted for several weeks. The company said the stolen data may have included cardholder name, account number, expiration date and verification code, and that online, mobile, Canadian and other international purchases were not affected.

Key Takeaway: Banks had already flagged fraudulent charges on cards used at bebe locations, and one bank found those cards for sale in an underground carding shop before the company went public. The company's response was a year of free credit monitoring, which does nothing to block fraud on the card accounts that were actually stolen.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related