BJ's Wholesale Club attracts shoppers to its stores by putting thousands of discounted products under one roof. It wasn't hard to attract cyberthieves either, with databases that amass credit card numbers in huge numbers.
The theft earlier this year of thousands of credit card records from the third-largest US warehouse club illustrates the potential for massive-scale identity theft whenever so much purchase-enabling information is stored in one place. It also illustrates how difficult the cleanup can be.
The Secret Service still doesn't know whether the breach was an inside job or the work of hackers, but it has made some arrests, said Tim Buckley, a Secret Service agent investigating the case.
The suspects arrested recently in the US and abroad may have ties to a large international identity theft ring, Buckley said. He declined to say how many arrests have been made or provide further details.
Meanwhile, financial institutions are still smarting. They've had to reissue hundreds of thousands of credit cards belonging to BJ's customers as a precaution against further fraud.
The BJ's case may be the largest retail fraud of its kind based on the amount of cards reissued, experts say.
Hundreds of thousands of replacements were sent to customers across the 16 states where BJ's operates, though BJ's says the breach affected only "a small fraction" of its 8 million members.
Philadelphia-based Sovereign Bank covered about 700 fraudulent transactions from the BJ's theft and had to reissue 81,000 cards twice, at a cost of about US$1 million, once in May and again in June, after a glitch occurred with the first batch, said spokeswoman Ellen Molle said.
"There are some pretty heavy losses out there," said Greg Smith, president of the Pennsylvania State Employees Credit Union, which reissued cards to 14,000 of its members at a cost of US$100,000.
Visa and Mastercard issuers in the US, most of them banks, lost an estimated US$820 million from fraud last year, up 6 percent from the previous year, according to a study by Credit Card Management, an industry magazine.
When BJ's disclosed the breach in a March 12 news release, it said it had altered its security systems and was confident customers' information was secure. BJ's, which has 150 clubs and 78 gas stations, has said the theft would have no material effect on its finances. Consumer advocacy organizations say they've received few consumer complaints.
But the Natick, Massachusetts-based company now faces claims from some of the 10 to 15 banks that had to replace cards or reimburse consumers for fraudulent transactions. Investigators and bank officials have declined to disclose the monetary losses.
As sensitive data about consumers -- not just credit card numbers but also buying habits and other personal information -- are recorded in databases, the potential for identity theft on a massive scale is increasing.
In July, three men pleaded guilty in North Carolina to charges they conspired to hack into the Lowe's home improvement chain's data network to steal credit card information. Lowe's officials said the men failed to get into the company's national database.
Such thefts raise costs for credit card issuers, which typically cover most losses from fraudulent transactions and limit liability to merchants. The problem is a moving target because thieves are creating increasingly sophisticated criminal networks with global reach.
"However they find the numbers, they end up on some computer bulletin board and are sold," Buckley said.
In months, Lo Yuet-ping would bid farewell to a centuries-old village he has called home in Hong Kong for more than seven decades. The Cha Kwo Ling village in east Kowloon is filled with small houses built from metal sheets and stones, as well as old granite buildings, contrasting sharply with the high-rise structures that dominate much of the Asian financial hub. Lo, 72, has spent his entire life here and is among an estimated 860 households required to move under a government redevelopment plan. He said he would miss the rich history, unique culture and warm interpersonal kindness that defined life in
AERIAL INCURSIONS: The incidents are a reminder that Russia’s aggressive actions go beyond Ukraine’s borders, Ukrainian Minister of Foreign Affairs Andrii Sybiha said Two NATO members on Sunday said that Russian drones violated their airspace, as one reportedly flew into Romania during nighttime attacks on neighboring Ukraine, while another crashed in eastern Latvia the previous day. A drone entered Romanian territory early on Sunday as Moscow struck “civilian targets and port infrastructure” across the Danube in Ukraine, the Romanian Ministry of National Defense said. It added that Bucharest had deployed F-16 warplanes to monitor its airspace and issued text alerts to residents of two eastern regions. It also said investigations were underway of a potential “impact zone” in an uninhabited area along the Romanian-Ukrainian border. There
A French woman whose husband has admitted to enlisting dozens of strangers to rape her while she was drugged on Thursday told his trial that police had saved her life by uncovering the crimes. “The police saved my life by investigating Mister Pelicot’s computer,” Gisele Pelicot told the court in the southern city of Avignon, referring to her husband — one of 51 of her alleged abusers on trial — by only his surname. Speaking for the first time since the extraordinary trial began on Monday, Gisele Pelicot, now 71, revealed her emotion in almost 90 minutes of testimony, recounting her mysterious
The governor of Ohio is to send law enforcement and millions of dollars in healthcare resources to the city of Springfield as it faces a surge in temporary Haitian migrants. Ohio Governor Mike DeWine on Tuesday said that he does not oppose the Temporary Protected Status program under which about 15,000 Haitians have arrived in the city of about 59,000 people since 2020, but said the federal government must do more to help affected communities. On Monday, Ohio Attorney General Dave Yost directed his office to research legal avenues — including filing a lawsuit — to stop the federal government from sending
RSS