Department stores unsure over extent of data breach
iSpeech.org
(2 Apr 2018) A data breach at department store chains Saks Fifth Avenue, Saks Off Fifth and Lord & Taylor has compromised the personal information of customers who shopped at the stores.
The chains' parent company, Canada-based Hudson's Bay Co., announced the breach of its store payment systems on Sunday.
The company said it was investigating and taking steps to contain the attack.
The disclosure came after New York-based security firm Gemini Advisory LLC revealed on Sunday that a hacking group known as JokerStash or Fin7 began boasting on dark websites last week that it was putting up for sale up to 5 million stolen credit and debit cards.
The hackers named their stash BIGBADABOOM-2.
While the extent of its holdings remains unclear, about 125,000 records were immediately released for sale.
Ankur Laroia, a data expert at Alfresco Software, said that while data breaches seem to be happening every day, the effects are anything but ordinary.
Laroia said companies must do a better job of protecting consumer data.
"I think that companies have got to start to wake up and say hey you know we've got to be good stewards of this information," said Laroia.
Hudson's Bay said in a statement that it "deeply regrets any inconvenience or concern this may cause," but it hasn't said how many Saks or Lord & Taylor stores or customers were affected.
The company said there's no indication that the breach affected its online shopping websites or other brands, including the Home Outfitters chain or Hudson's Bay stores in Canada.
The company said customers won't be liable for fraudulent charges. It plans to offer free credit monitoring and other identity protection services.
You can license this story through AP Archive: http://www.aparchive.com/metadata/youtube/6a050c72b4d279571ef65f66b7caccba
Find out more about AP Archive: http://www.aparchive.com/HowWeWork
2018-04-07 20:21:39
source
Gloss