Gang Rigged Pumps With Bluetooth Skimmers
Summary: Manhattan District Attorney Cyrus R. Vance, Jr. announced the indictment of thirteen men accused of installing Bluetooth-enabled wireless skimmers at Raceway and Racetrac gas stations in Georgia, South Carolina and Texas, stealing more than $2.1 million. The devices drew power from the pump and let thieves retrieve stolen card and PIN data wirelessly from a laptop at the pump, after which the data was encoded onto counterfeit cards and cash withdrawn at ATMs in sub-$10,000 increments to avoid anti-money-laundering reporting.
Bottom line: The skimmers were installed in 5 to 10 minutes with a universal pump key, and a California officer's reports describe a repeatable playbook of weekend and early-morning hits - meaning the physical access control on the pump, not the payment network, is the weak point.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026