BreachExchange mailing list archives

Canadian Thieves Swapping out keypad terminals


From: "DAIL, ANDY" <ADAIL () sunocoinc com>
Date: Tue, 11 Jul 2006 09:36:21 -0400


Has anyone heard any additional detail on this?  Tampering with the
keypad is *SUPPOSED* to wipe the authentication key from memory.




DEBIT CARD FRAUD PLAGUES CANADIAN RETAILERS

NEW YORK - A recent surge in debit card fraud is plaguing Canadian
retailers, reports BankNet 360.

The news source writes that debit card thieves are stealing card
terminals from gas stations, convenience stores and fast food
restaurants so they can rig the devices and swipe embedded data stored
on card magnetic strips. Thieves then switch the rigged terminals with
genuine machines, which gives them the ability to collect personal
account information from swiped debit cards, such as personal
identification numbers (PIN).

"In Ottawa and Montreal, PIN pad fraud has resulted in approximately
$6.7 million in losses during the past few months," notes the news
source.

Additionally, more than 40 retailers in Montreal have reported that
wireless Internet connections were used to remotely retrieve PINs and
card numbers from rigged card terminals. Thieves used that data to clear
out the bank accounts of approximately 18,000 debit card holders.

The news source notes that Canadians use debit cards "more than any
other country, averaging 82 million debit transactions a year."

Copyright 2006 NACS

________________________________________________________________________
_
NACS Daily
Subscribe:    http://www.nacsonline.com/NACS/NACSDaily/Subscribe.htm
Today's News: http://www.nacsonline.com/NACS/News/
News Archive: http://www.nacsonline.com/NACS/News/Daily_News_Archives/


This message and any files transmitted with it is intended solely for the designated recipient and may contain 
privileged, proprietary or otherwise private information. Unauthorized use, copying or distribution of this e-mail, in 
whole or in part, is strictly prohibited. If you have received it in error, please notify the sender immediately and 
delete the original and any attachments.
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/


Current thread: