Gander Mountain Missing Computer Contains 112, 000 Credit Card Numbers

["Evan Francen" <evan.francen () gmail com>]

http://breachblog.com/2007/09/11/gander-mountain-missing-computer-contains-112000-credit-card-numbers.aspx

"Gander Mountain Company (Nasdaq: GMTN) today announced that computer
equipment, containing certain customer transaction information
relating to a single store in Pennsylvania, is missing and may have
been stolen. The transaction data relates only to customers who
conducted business with the Gander Mountain store located in
Greensburg, PA during the period from July 2002 through June 2007."

"The stored transaction information may have included:

Approximately 112,000 credit card numbers with expiration date but
without any other associated information.

Approximately 10,000 transaction records may have included the credit
card number, expiration date and customer name.

For the approximately 5,100 credit card customers who returned
merchandise or did a lay-away purchase at the store during this
period, the information also may have included an address.

For the approximately 650 customers who purchased by check and
returned merchandise without a receipt or put merchandise on layaway
by check payment, the information may have contained a name, address,
driver's license number and date of birth. "
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml