Card Wash: Card Breaches at Car Washes
Summary: Police in Everett, Massachusetts arrested Jean Pierre for possessing nine stolen credit card accounts, and investigators traced at least one card to a breach at a Splash Car Wash in Connecticut. Working with the Connecticut Financial Crimes Task Force, detectives determined that at least 40 car washes nationwide had been hacked since at least February 2014, many running Micrologic point-of-sale systems with pcAnywhere remote access protected by default credentials.
What's compelling: The thieves were buying stolen cards to purchase $500 prepaid gift cards, then re-encoding those cards with new stolen data once balances ran out - and Detective Lavey said the perpetrators were Bloods gang members moving across state lines and taking hundreds of thousands of dollars while banks quietly reimburse victims and retailers avoid press attention.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026