funsec mailing list archives
4 Arrested in Stop & Shop Data Thefts
From: "'Richard M. Smith'" <rms () computerbytesman com>
Date: Tue, 27 Feb 2007 14:06:14 -0500
I would love to see a photo of one of these modified PIN pads. From the article, it sounds the alleged thefts added a little circuit board to a stolen PIN pad that recorded magstripe scans and PIN keyboard entries in flash memory. A modified PIN pad was quickly installed in a store in place of a regular PIN pad. Another switch a week or two later would be required to retrieve the stolen debit card numbers and PINs. Richard ========================================================= http://www.chron.com/disp/story.mpl/ap/fn/4585707.html PROVIDENCE, R.I. - Four people were arrested in the thefts of account and personal information from at least two Stop & Shop stores, a company spokeswoman said Tuesday. They were arrested Monday night in the parking lot of the supermarket chain's Coventry store when employees noticed some of the suspects resembled photos of the people wanted in the thefts of customer information, said Faith Weiner, a spokeswoman for The Stop & Shop Supermarket Co. The employees called police when they noticed the suspects in the checkout area. The prior thefts at the Coventry and Cranston stores occurred after someone tampered with the checkout lane keypads. Credit and debit card account numbers and pins were stolen from the two stores in early February, the store has said. Stop & Shop, based in Quincy, Mass., said it also discovered similar tampering at four other stores _ in Bristol, Providence, Warwick, and in Seekonk, Mass. Coventry police wouldn't comment or release the details of the suspects. Stop & Shop has said it does not know how many customers had their information stolen. The thefts were discovered after a bank notified the company that two store locations were the common links to illegal purchases made elsewhere. Stop & Shop then investigated, and found evidence of keypad tampering. U.S. Secret Service is assisting the investigation. Stop & Shop has said its investigation has not uncovered any involvement or suspected involvement of any Stop & Shop personnel. Company officials recommended that customers who used electronic payment cards in the Rhode Island and Seekonk stores monitor their bank or credit card statements and contact the applicable bank or credit card issuer if they spot fraudulent transactions. Stop & Shop is owned by Ahold USA, which is owned by Dutch food giant Royal Ahold. _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- 4 Arrested in Stop & Shop Data Thefts 'Richard M. Smith' (Feb 27)