COVID-19 ‘Breach Bubble’ Waiting to Pop?
Summary: Gemini Advisory reports a drop of over 50 percent in demand for stolen card-present data since COVID-19 quarantines began, while supply has held steady because most sold data still comes from 2019 and early 2020 breaches. A 10-month breach at dozens of Chicken Express locations in Texas and other southern states exposed an estimated 165,000 cards, tied by Coalfire to the PwnPOS point-of-sale malware, and Chicken Express CEO Ricky Stuart said he did not know how many of the chain's 250 stores had chip-capable readers.
Key Takeaway: Investigators suspect intruders already hold beachheads in smaller online merchants and are waiting for transaction volumes to recover, which would let them mix cards from many hacked sites and evade the common point of purchase analysis banks rely on to trace fraud back to a merchant.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026