Forest Global Training Partners

Cyber Risks · Krebs on Security

3 Million Customer Credit, Debit Cards Stolen in Michaels, Aaron Brothers Breaches

Summary: Michaels Stores disclosed that two separate eight-month-long breaches at its stores and subsidiary Aaron Brothers may have exposed as many as 3 million customer credit and debit cards, with about 2.6 million cards affected at Michaels between May 8, 2013 and January 27, 2014 and roughly 400,000 at 54 Aaron Brothers stores between June 26, 2013 and February 27, 2014. The company said two independent security firms it hired initially found nothing before confirming highly sophisticated malware that neither firm had previously encountered, and that the affected systems held card numbers and expiration dates but no evidence of names, addresses or debit card PINs at risk.

What you should know: Two independent security firms examined the intrusion and initially found nothing, which means the malware evaded the exact expertise a retailer hires to catch it. This was also the second compromise of Michaels' payment systems in three years, following physical tampering with point-of-sale devices at Chicago-area stores disclosed in May 2011.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related