Malware Based Credit Card Breach at Kmart
Summary: Sears Holding Co. disclosed that point-of-sale registers at its Kmart stores were infected with malware that stole customer credit and debit card data, with the breach believed to have started in early September and the malware removed after IT teams detected it. Sears spokesman Chris Brathwaite said the stolen data was limited to "track 2" card data and did not include names, addresses, Social Security numbers or PINs, though he acknowledged the data would allow thieves to create counterfeit cards.
What you should know: The stolen track 2 data is enough to manufacture counterfeit cards, and Sears said the malware was a form undetectable by anti-malware systems at the time - meaning the POS registers were compromised while standard endpoint protection was in place.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026