Breach at Michaels Stores Extends Nationwide
Summary: Michaels Stores found at least 70 compromised point-of-sale terminals across the country, from Washington D.C. to the West Coast, after banks and law enforcement traced fraudulent debit card transactions back to specific stores. Detective Jeff Stolzenburg of the Libertyville Police Department estimated card losses in the millions of dollars with thousands of victims, and the investigation was turned over to the U.S. Secret Service; Michaels later said it identified fewer than 90 tampered PIN pads, about 1% of devices in its 964 U.S. stores, and removed roughly 7,200 comparable pads.
What's compelling: Investigators say the stolen data was used to make counterfeit cards and withdraw funds with stolen PINs at ATMs in Las Vegas and elsewhere in the West, with withdrawals of up to $500 per victim - and the fraudsters' method of compromising the terminals was still unknown.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026