Credit Card Breach at Buckle Stores

"The Buckle Inc., a clothier that operates more than 450 stores in 44 U.S. states, disclosed Friday that its retail locations were hit by malicious software designed to steal customer credit card data. The disclosure came hours after KrebsOnSecurity contacted the company regarding reports from sources in the financial sector about a possible breach at the retailer.[When would it have been disclosed but for Krebs' inquiry?]

Later Friday evening, The Buckle Inc. released a statement saying that point-of-sale malware was indeed found installed on cash registers at Buckle retail stores, and that the company believes the malware was stealing customer credit card data between Oct. 28, 2016 and April 14, 2017.

https://krebsonsecurity.com/2017/06/credit-card-breach-at-buckle-stores/

..."Malware sat on its point-of-sale systems for [six] months...

The potential data loss is limited if you used a relatively secure chip-based card, but it's much worse if you relied on the magnetic stripe...

It's clearly a problem that Buckle didn't catch the malware for months, and that we're only hearing about the breach two months after Buckle resolved it...

Some American banks still haven't issued chip-based cards, and you aren't obliged to replace an existing stripe-only card until it expires. It may take years before chips dominate American shopping the way they do in other countries, and that makes it all too tempting to hijack their point-of-sale systems in the meantime."

https://www.engadget.com/2017/06/17/buckle-cash-register-malware/

oOps -- Dupe:

https://www.wilderssecurity.com/threads/credit-card-breach-at-buckle-stores.394829/

Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post.
Search BEFORE you post..., etc., etc.