Malware Infected All Eddie Bauer Stores in U.S., Canada
Summary: Eddie Bauer detected and removed card-stealing malware from point-of-sale systems at all of its 350+ stores in the United States and Canada, saying credit and debit card numbers may have been captured between January 2, 2016 and July 17, 2016. The company disclosed the breach nearly six weeks after KrebsOnSecurity contacted it on July 5, 2016, based on bank fraud sources who said the fraudulent card use stretched back to at least January 2016.
What's compelling: Malware sat on cash registers across every one of 350+ stores for more than six months before it was found, and the company said it will not publish the indicators of compromise that would let other retailers check whether the same tools are on their own systems.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026