More on Bluetooth Ingenico Overlay Skimmers

Summary: A security technician at a U.S. retailer found Bluetooth-based overlay skimmers on three self-checkout Ingenico card readers, devices that capture card data on swipe and record PINs through a PIN pad overlay. The skimmers, built from parts cannibalized from Samsung smartphones, transmitted stolen data wirelessly to any Bluetooth-enabled device within roughly 30 meters, connected with the PIN "2016," and had no on-board storage, suggesting thieves collected data in real time from a nearby device or from the parking lot.
What you should know: An employee only noticed because the PIN pad buttons felt too hard to press, and investigators who combed the property for a collection device found nothing - meaning stolen card and PIN data can leave a store over Bluetooth without any device on the premises to find.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026