Card Wash: Card Breaches at Car Washes

[InfoSec News <alerts () infosecnews org>]

http://krebsonsecurity.com/2014/06/card-wash-card-breaches-at-car-washes/

By Brian Krebs
Krebs on Security
June 23, 2014

An investigation into a string of credit card breaches at dozens of car 
wash locations across the United States illustrates the challenges facing 
local law enforcement as they seek to connect the dots between cybercrime 
and local gang activity that increasingly cross multiple domestic and 
international borders.

Earlier this month, police in Everett, Massachusetts arrested a local man 
named Jean Pierre for possessing nine stolen credit cards. The cards 
themselves weren’t stolen: They were gift cards that had been re-encoded 
with data from cards that were stolen from a variety of data breaches at 
merchants, including a Splash Car Wash in Connecticut.

How authorities in Massachusetts connected Pierre to a cybercrime at a 
Connecticut car wash is a mix of odd luck and old-fashioned police work. 
In May, the Everett police department received a complaint from a 
sheriff’s department in South Carolina about a resident who’d had his 
credit card account used repeatedly for fraudulent transactions at a 
Family Dollar store in Everett.

Everett PD Detective Michael Lavey obtained security camera footage from 
the local Dollar Store in question. When Lavey asked the store clerk if he 
knew the individuals pictured at the date and time of the fraudulent 
transactions, the clerk said the suspects had been coming in for months — 
several times each week — always purchasing gift cards.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/