Sally Beauty Hit By Credit Card Breach
Summary: On March 2, a batch of 282,000 stolen credit and debit cards went on sale in an underground card shop, and 15 cards bought back by three separate banks had all been used within the prior ten days at Sally Beauty stores across the United States. Sally Beauty spokeswoman Karen Fugate said the company's Tripwire file-integrity product detected activity around Feb. 24, after which the company shut down all external communications and brought in Verizon Enterprise Solutions, which found no evidence that customer card data left its systems.
Key Takeaway: Three banks independently traced their own reissued cards back to Sally Beauty through common point of purchase, while the company's forensics firm found no evidence of data theft - a gap that leaves 2,600 stores and every U.S. state in scope until it is resolved.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026