Cyber Risks · Krebs on Security

Sources: Tea Leaves Say Breach at Teavana

Summary: KrebsOnSecurity reported in April 2013 that law enforcement and financial industry sources were warning of a possible credit and debit card breach at Teavana, the tea retailer Starbucks had acquired on December 31, 2012, spanning more than 280 stores. A source at one card issuer said its fraud team saw counterfeits jump from nothing to 200 in one week in early March 2013, with nearly all the cloned cards previously used at Teavana locations, many as far back as late 2012.

Why it matters: The counterfeit cards were used to buy high-dollar gift cards at Target stores, and the ability to clone them means attackers almost certainly planted magnetic-stripe-skimming malware on point-of-sale devices - the same pattern Schnucks disclosed last month, where roughly 2.4 million cards at 79 stores were exposed.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related