Cyber Risks · Krebs on Security

Banks: Credit Card Breach at Bebe Stores

Summary: Banks reported a pattern of fraudulent charges on customer cards that had all been used at Bebe Stores, a roughly 200-store women's clothing chain, and an East Coast bank found cards from a batch released Dec. 1 on the cybercrime shop goodshop[dot]bz had all been used at Bebe locations between Nov. 18 and Nov. 28. The shop's 'Happy Winter Update' batch sells magnetic stripe data at $10 to $27 per card, and Bebe had not responded to requests for comment.

What's compelling: The stolen data is mag stripe information that thieves re-encode onto new plastic to buy resellable goods, the same point-of-sale malware pattern behind the Home Depot, Target, Neiman Marcus and Michaels breaches - and it is not clear whether the Bebe breach is ongoing or predates mid-November 2014.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related