Crooks plant fake payment card terminals at multiple stores
'Visually identical' pads siphoned customer data
Customer Success Testimonial: Recovery is Everything
Crooks planted bogus payment card processing terminals at multiple locations operated by the Hancock Fabrics chain store that allowed for the theft of sensitive financial data from customers, the company warned.
The personal identification number pads were stolen in August and September and "replaced with visually identical, but fraudulent PIN pad units," Hancock Fabrics warned in a letter to customers. "As a result, certain account information and PIN numbers used at these locations may have been unlawfully acquired by third parties."
Intercepted information may have included the name printed on the payment card, the card number, the expiration date, and the PIN if it was entered into one of the fraudulent terminals. The company recommended that customers review their account statements and credit reports.
The hardware switcheroo is only the latest example of crooks surreptitiously planting a skimming device that can siphon huge amounts of sensitive data. Last month, three Bulgarian men were charged with defrauding banks of more than $137,000 in a scheme that attached devices to numerous automatic teller machines in Massachusetts. If they are convicted, maximum prison sentences range from 42 years to 57 years.
And as Forbes points out, crooks in Canada appear to have planted fake hardware to point-of-sale terminals at a Wendy's fast food restaurant in 2007. Police in Utah said recently that skimmers attached to gas-station pumps stole at least $11,000 and may have remained active for as long as 60 days.
Hancock employees have recently replaced every PIN pad unit in all of its stores with upgraded models. It has also upgraded automated systems that resist tampering and monitor PIN pads for suspicious activity. ®
COMMENTS
re: Solution
Huh. In my experience it would be more like
1.Walk into bank.
2. Try and find a pen still attached to its chain
3. Try and find a working pen still attached to its chain
4. Fill in withdrawal form without the pen nib tearing the form in two
5. Join interminably long queue
6. Realise you are behind the man from the penny arcade who's cashing in his yearly takings
7. Give up and risk being hacked. It's less hassle.
We could...
...ship them off to some penal colony somewhere. But I think the Aussies would complain, they're not hot on immigration these days.
Cf. http://bash.org/?262417
Solution.
1.Walk into bank.
2. fill in paper withdrawal form
3. speak to cleark.
4. walk out with real, hard, cash
5. buy items.
6. Be content that your purchase was guaranteed hacker free.
Cash truely is the last anonymous transaction.
IT infrastructure monitoring strategies
What you need to know about cloud backup
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Customer Success Testimonial: Recovery is Everything
