Slashdot Mirror
Malware Infected All Eddie Bauer Stores In US, Canada (krebsonsecurity.com)
New submitter alir1272 quotes a report from Krebs On Security: Clothing store chain Eddie Bauer said today it has detected and removed malicious software from point-of-sale systems at all of its 350+ stores in North America, and that credit and debit cards used at those stores during the first six months of 2016 may have been compromised in the breach. The acknowledgement comes nearly six weeks after Krebs On Security first notified the clothier about a possible intrusion at stores nationwide. "The company emphasized that this breach did not impact purchases made at the company's online store eddiebauer.com," reports Krebs On Security.
Overpriced, snooty-assed brand...
Thank god for Slashdotters they aren't a big and tall store!
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
Is Eddie Bauer still a thing? I remember checking that place out years ago and never went back, nothing but a bunch of overpriced garbage.
...credit and debit cards used at those stores during the first six months of 2016 may have been compromised in the breach.
How is it that it went undetected by credit card companies and banks for so long? Surely they should have detected a pattern. I've always wondered why credit card companies don’t seem to care about fraud. It's like they have no interest in getting to the bottom of it.
Eddie? Keees me goodnight!
Let's see who gets that reference....
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Another day, another government department with shitty security paid for with STOLEN tax dollars.
I'd be willing to bet any amout of money that they were running XP.
these sorts of things simply didn't happen when the credit card machines were hooked directly up to a phone line. swipe, authorize, print, sign, done.
the same thing COULD still be done with the "new" chip cards (chip and sign, chip and pin, or debit or gift card for that matter), if merchants and credit card companies weren't so fucking clueless.
yes, they still make those devices, and yes, the new ones do the new cards and some can even still do dial-up.
merchants should be 100% accountable for every single bit of stolen credit card details, because it is they who choose the less-secure pc-based credit card processing. and i'd even go one farther to say they may even be *criminally negligent* because a more secure method that does not require their own handling of credit card information has existed for *decades*
or any version of Winbugs.
Just use cash and not worry about it
And ten million hipsters cried out in terror, as if there had been a great disturbance in the supply of flannel lunberjack shirts.
Just cruising through this digital world at 33 1/3 rpm...
"...credit and debit cards used at those stores during the first six months of 2016 may have been compromised in the breach"
I set fire to your house and burned it to the ground. There may have been some smoke damage.
Just cruising through this digital world at 33 1/3 rpm...
"Overpriced, snooty-assed brand..."
What a strange thing to say. Their stuff is pretty normal, middle-of-the-road, plain vanilla.
I personally know some of the IT workers at Eddie Bauer and they're incompetent morons that have no business working in IT. They have impressive resumes and absolutely no practical, real-world IT skills whatsoever. I was going to pursue a job there but after looking into it, I didn't even bother applying.
I thought that Sears bought the Eddie Bauer Brand about 7 years ago, and were going to integrate those products into their regular stores.
News for Nerds: Eddie Bauer still has over 350 brick-and-mortar stores in North America.
Who knew? Where should we go for our khakis now?
or it wouldn't be here. But did they do it?
yes, Eddie, like nearly all those that have been cracked, runs windows and outsourced to India, some parts. I'm not certain, where, but I will put money down, that India has access to the POS and handle the Sys. Ad.
Some of you will scream that this is racists. You are right, but not on my part, but on yours.
The fact is, that when you pay somebody 1/10 of what you pay normally, and you have enemies that have easy access to these employees, well, all they have to do is offer 10-20x what you were paying. IOW, these companies are paying Indians below $10,000 due to India manipulating their money downwards.
Now, Russians who have easy access to India, come along and offer various indians $100,000 to leave a back door, at which point, the Russians will put in a NEW backdoor and remove the old one.
What is crazy is that fact that so many ignore this situation. And it is easy to spot. Just got to get over your racists attitude and simply copy the VPN streams from India.
I prefer the "u" in honour as it seems to be missing these days.