New Breed of Fuel Pump Skimmer? Not Really
Summary: KrebsOnSecurity retracted its earlier report that a circular device found on a gas pump was a text-messaging card skimmer, after a security employee at the station's owner showed the device was a $100-$150 GPS tracker likely left behind by someone being tracked. The station did have multiple pumps internally compromised with Bluetooth skimming devices, and the original story had cited a U.S. Secret Service alert and ControlScan, the company that found the device and alerted authorities.
What you should know: The correction matters because the original claim - a skimmer relaying stolen card data by SMS - was attributed to a Secret Service memo and a payment-security vendor, and it took a reader inside the station's ownership to disprove it. Meanwhile the Bluetooth skimmers inside the pumps were real, and Krebs notes detection apps catch only one module type (HC-05) out of at least four in use.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026