4 Arrested in Stop & Shop Data Thefts

["'Richard M. Smith'" <rms () computerbytesman com>]

I would love to see a photo of one of these modified PIN pads.  From the
article, it sounds the alleged thefts added a little circuit board to a
stolen PIN pad that recorded magstripe scans and PIN keyboard entries in
flash memory.  A modified PIN pad was quickly installed in a store in place
of a regular PIN pad.  Another switch a week or two later would be required
to retrieve the stolen debit card numbers and PINs.

Richard

=========================================================

http://www.chron.com/disp/story.mpl/ap/fn/4585707.html

PROVIDENCE, R.I. - Four people were arrested in the thefts of account and
personal information from at least two Stop & Shop stores, a company
spokeswoman said Tuesday.

They were arrested Monday night in the parking lot of the supermarket
chain's Coventry store when employees noticed some of the suspects resembled
photos of the people wanted in the thefts of customer information, said
Faith Weiner, a spokeswoman for The Stop & Shop Supermarket Co.
The employees called police when they noticed the suspects in the checkout
area. The prior thefts at the Coventry and Cranston stores occurred after
someone tampered with the checkout lane keypads.

Credit and debit card account numbers and pins were stolen from the two
stores in early February, the store has said.
Stop & Shop, based in Quincy, Mass., said it also discovered similar
tampering at four other stores _ in Bristol, Providence, Warwick, and in
Seekonk, Mass.

Coventry police wouldn't comment or release the details of the suspects.

Stop & Shop has said it does not know how many customers had their
information stolen. The thefts were discovered after a bank notified the
company that two store locations were the common links to illegal purchases
made elsewhere. Stop & Shop then investigated, and found evidence of keypad
tampering.
U.S. Secret Service is assisting the investigation. Stop & Shop has said its
investigation has not uncovered any involvement or suspected involvement of
any Stop & Shop personnel.

Company officials recommended that customers who used electronic payment
cards in the Rhode Island and Seekonk stores monitor their bank or credit
card statements and contact the applicable bank or credit card issuer if
they spot fraudulent transactions.
Stop & Shop is owned by Ahold USA, which is owned by Dutch food giant Royal
Ahold.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.