BJ's Wholesale Club attracts shoppers to its stores by putting thousands of discounted products under one roof. It wasn't hard to attract cyberthieves either, with databases that amass credit card numbers in huge numbers.
The theft earlier this year of thousands of credit card records from the third-largest US warehouse club illustrates the potential for massive-scale identity theft whenever so much purchase-enabling information is stored in one place. It also illustrates how difficult the cleanup can be.
The Secret Service still doesn't know whether the breach was an inside job or the work of hackers, but it has made some arrests, said Tim Buckley, a Secret Service agent investigating the case.
The suspects arrested recently in the US and abroad may have ties to a large international identity theft ring, Buckley said. He declined to say how many arrests have been made or provide further details.
Meanwhile, financial institutions are still smarting. They've had to reissue hundreds of thousands of credit cards belonging to BJ's customers as a precaution against further fraud.
The BJ's case may be the largest retail fraud of its kind based on the amount of cards reissued, experts say.
Hundreds of thousands of replacements were sent to customers across the 16 states where BJ's operates, though BJ's says the breach affected only "a small fraction" of its 8 million members.
Philadelphia-based Sovereign Bank covered about 700 fraudulent transactions from the BJ's theft and had to reissue 81,000 cards twice, at a cost of about US$1 million, once in May and again in June, after a glitch occurred with the first batch, said spokeswoman Ellen Molle said.
"There are some pretty heavy losses out there," said Greg Smith, president of the Pennsylvania State Employees Credit Union, which reissued cards to 14,000 of its members at a cost of US$100,000.
Visa and Mastercard issuers in the US, most of them banks, lost an estimated US$820 million from fraud last year, up 6 percent from the previous year, according to a study by Credit Card Management, an industry magazine.
When BJ's disclosed the breach in a March 12 news release, it said it had altered its security systems and was confident customers' information was secure. BJ's, which has 150 clubs and 78 gas stations, has said the theft would have no material effect on its finances. Consumer advocacy organizations say they've received few consumer complaints.
But the Natick, Massachusetts-based company now faces claims from some of the 10 to 15 banks that had to replace cards or reimburse consumers for fraudulent transactions. Investigators and bank officials have declined to disclose the monetary losses.
As sensitive data about consumers -- not just credit card numbers but also buying habits and other personal information -- are recorded in databases, the potential for identity theft on a massive scale is increasing.
In July, three men pleaded guilty in North Carolina to charges they conspired to hack into the Lowe's home improvement chain's data network to steal credit card information. Lowe's officials said the men failed to get into the company's national database.
Such thefts raise costs for credit card issuers, which typically cover most losses from fraudulent transactions and limit liability to merchants. The problem is a moving target because thieves are creating increasingly sophisticated criminal networks with global reach.
"However they find the numbers, they end up on some computer bulletin board and are sold," Buckley said.
A fire caused by a burst gas pipe yesterday spread to several homes and sent a fireball soaring into the sky outside Malaysia’s largest city, injuring more than 100 people. The towering inferno near a gas station in Putra Heights outside Kuala Lumpur was visible for kilometers and lasted for several hours. It happened during a public holiday as Muslims, who are the majority in Malaysia, celebrate the second day of Eid al-Fitr. National oil company Petronas said the fire started at one of its gas pipelines at 8:10am and the affected pipeline was later isolated. Disaster management officials said shutting the
US Vice President J.D. Vance on Friday accused Denmark of not having done enough to protect Greenland, when he visited the strategically placed and resource-rich Danish territory coveted by US President Donald Trump. Vance made his comment during a trip to the Pituffik Space Base in northwestern Greenland, a visit viewed by Copenhagen and Nuuk as a provocation. “Our message to Denmark is very simple: You have not done a good job by the people of Greenland,” Vance told a news conference. “You have under-invested in the people of Greenland, and you have under-invested in the security architecture of this
Japan unveiled a plan on Thursday to evacuate around 120,000 residents and tourists from its southern islets near Taiwan within six days in the event of an “emergency”. The plan was put together as “the security situation surrounding our nation grows severe” and with an “emergency” in mind, the government’s crisis management office said. Exactly what that emergency might be was left unspecified in the plan but it envisages the evacuation of around 120,000 people in five Japanese islets close to Taiwan. China claims Taiwan as part of its territory and has stepped up military pressure in recent years, including
UNREST: The authorities in Turkey arrested 13 Turkish journalists in five days, deported a BBC correspondent and on Thursday arrested a reporter from Sweden Waving flags and chanting slogans, many hundreds of thousands of anti-government demonstrators on Saturday rallied in Istanbul, Turkey, in defence of democracy after the arrest of Istanbul Mayor Ekrem Imamoglu which sparked Turkey’s worst street unrest in more than a decade. Under a cloudless blue sky, vast crowds gathered in Maltepe on the Asian side of Turkey’s biggest city on the eve of the Eid al-Fitr celebration which started yesterday, marking the end of Ramadan. Ozgur Ozel, chairman of the main opposition Republican People’s Party (CHP), which organized the rally, said there were 2.2 million people in the crowd, but
RSS