ZIP Codes Show Extent of Sally Beauty Breach
Summary: Sally Beauty acknowledged a breach affecting fewer than 25,000 customer credit and debit cards, but a ZIP code analysis of 282,000 cards sold under the "Desert Strike" label on Rescator's shop found a 99.99 percent overlap with the ZIP codes of its roughly 2,600 U.S. stores. The same technique previously matched cards for sale to nearly all 1,800 Target locations, and the author notes the batch could be the first of several released in coming weeks.
Bottom line: Sally Beauty's stated figure of fewer than 25,000 cards would require the intruders to have been stopped within 24 hours at roughly 10 transactions per store, while 282,000 cards are already for sale and more batches may follow.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026