Cyber Risks · Krebs on Security

B&B Theatres Hit in 2-Year Credit Card Breach

Summary: B&B Theatres, which operates roughly 400 screens across 50 locations in seven states, confirmed it is investigating a breach of its credit card systems after KrebsOnSecurity contacted the company about reports from financial industry sources. Card association advisories cited by two financial institutions put the exposure window at roughly April 2015 to April 2017, and B&B said Trustwave found malware on its systems dating back to 2015 while concluding the breach was contained to the satisfaction of its processing partners and the major card brands.

What's compelling: Thieves had nearly two years to copy magnetic-stripe data from point-of-sale systems before the breach was contained, and the company's statement did not say whether its card systems could process chip-based transactions - which under 2015 card association rules would leave a merchant liable for fraud on chip-enabled cards that were swiped instead.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related