Bluetooth Overlay Skimmer That Blocks Chip

Summary: A security worker for a U.S. retail chain found Bluetooth-enabled overlay skimmers placed on payment terminals at several stores, with a physical component that blocked the terminal from reading chip cards and forced customers to swipe the magnetic stripe. The overlays also included a hidden PIN pad that captured and transmitted PINs over Bluetooth, and the source said they went undetected for several weeks despite frequent counter and terminal wipe-downs during COVID-19.
Bottom line: The skimmers sat in place for weeks while customers were being forced to swipe, and with a captured PIN and debit card data thieves can clone the card and empty a checking account at an ATM.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026