Cyber Risks · Krebs on Security

Malware Infected All Eddie Bauer Stores in U.S., Canada

Summary: Eddie Bauer detected and removed card-stealing malware from point-of-sale systems at all of its 350+ stores in the United States and Canada, saying credit and debit card numbers may have been captured between January 2, 2016 and July 17, 2016. The company disclosed the breach nearly six weeks after KrebsOnSecurity contacted it on July 5, 2016, based on bank fraud sources who said the fraudulent card use stretched back to at least January 2016.

What's compelling: Malware sat on cash registers across every one of 350+ stores for more than six months before it was found, and the company said it will not publish the indicators of compromise that would let other retailers check whether the same tools are on their own systems.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related