Credit Card Breach at Buckle Stores
Summary: The Buckle Inc., a clothier with more than 450 stores in 44 U.S. states, disclosed that point-of-sale malware was found on cash registers at its retail locations and believes customer credit card data was stolen between Oct. 28, 2016 and April 14, 2017. The company said its online store was not affected, and that all stores have EMV-capable terminals, though the malware copied account data from the card's magnetic stripe.
Bottom line: The stolen stripe data is enough for thieves to clone cards and buy high-priced merchandise, and the exposure runs to any customer who swiped a non-chip card or swiped a chip card at an infected terminal. Visa reported more than 421 million chip cards in the U.S. as of March 2017, but that was only 58 percent of its cards, leaving the rest exposed at the register.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026