Peek Inside a Professional Carding Shop
Summary: Krebs on Security profiled McDumpals, a dumps shop that went online in late April 2013 and sells stolen credit card data from breaches at main street stores in nearly every U.S. state, requiring new customers to pay a roughly $100 Bitcoin deposit before viewing the goods. The shop indexes cards by BIN and by the state or region of the victim merchant, sells packs of more than 1,000 cards at wholesale prices, and offers an optional checker service for 10-20 cents per card that refunds invalid purchases within a short window.
Why it matters: Cards are priced by advertised valid rate, with bases above 90 percent valid commanding the highest prices because they signal a breach the merchant or banks have not yet detected - meaning stolen card data can be on sale before the victim knows it is gone.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026