Cards Stolen in Target Breach Flood Underground Markets
Summary: Stolen Target card accounts were being sold on the card shop rescator[dot]la in batches of one million under the base name Tortuga, priced from $20 to more than $100 per card, after a breach window of Nov. 27 to Dec. 15 that Target confirmed on Dec. 19 affected 40 million cards. A New England community bank that had issued more than 120,000 cards found nearly 6,000 used at Target during the breach window, bought back 20 of its own cards from the shop, and confirmed all 19 still valid had been used at Target stores nationwide between Nov. 29 and Dec. 15.
What you should know: The bank had heard nothing from Visa, MasterCard or law enforcement about which of its cards were compromised, and re-issuing costs $3 to $5 per card across more than 5,300 affected accounts - a bill and a decision it faced alone, during the holiday shopping week.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026