Sally Beauty Confirms Card Data Breach
Summary: Sally Beauty confirmed that hackers broke into its networks and stole card-present (track 2) payment card data, saying fewer than 25,000 records were illegally accessed and believed removed. The admission came nearly two weeks after KrebsOnSecurity reported the company had likely been compromised by the same gang that stole 40 million cards from Target, and the retailer said it was working with Verizon on the investigation and with the U.S. Secret Service on a preliminary investigation.
What you should know: The company had previously confirmed a breach but said it had no evidence card data was stolen, and its own statement concedes the scope is hard to establish before a forensic investigation is complete. The fraud shop selling the Sally Beauty cards, rescator[dot]so, was itself hacked and defaced over the weekend, with its customer usernames and passwords dumped online.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026