hudsonsbaycompany
Latest
Hackers take 5 million payment cards from Saks, Lord & Taylor stores
The wave of large-scale retail data breaches isn't about to subside any time soon. Gemini Advisory has discovered that a JokerStash online crime syndicate, Fin7, is planning to sell over 5 million payment cards stolen from the databases of 83 Saks Fifth Avenue stores (including Off 5th) and the entire network of Lord & Taylor. The crooks are 'only' selling 125,000 of the cards on the Dark Web as of this writing, but the rest are expected to reach the black market in the months ahead. The breaches reportedly started in May 2017, but could be continuing to this day.
Saks Fifth Avenue left customer data exposed to the public
Sometimes, hackers don't have to lift a finger to swipe valuable shopping data -- it can be sitting right out in the open. BuzzFeed News has found that Saks Fifth Avenue was storing info for tens of thousands of customers in plain text on their servers. There was no payment data, thankfully, but the content revealed email addresses, phone numbers, internet addresses and product IDs. If a malicious visitor wanted to commit identity fraud or scam a customer, they had at least some of what they needed.
