Staples: Customer data exposed in security breach

Staples Inc. says nearly 1.2 million customer payment cards may have been exposed during a security breach earlier this year.

The office supply retailer announced in October that it was looking into a potential card breach, adding to a long list of retailers recently hit by cyberattacks.

Staples said Friday that an investigation shows that the criminals used malware that may have allowed access to information for transactions at 115 of its U.S. stores, which total more than 1,400. That includes cardholder names, payment card numbers, expiration dates and card verification codes.

The Framingham, Massachusetts-based company is offering free identity protection services—including credit monitoring, identity theft insurance a free credit report—to customers who might be at risk.

The affected different stores at different times between July and September.

Staples said that it has also received reports of fraudulent card use tied to four of its New York stores between April and September. While it found no evidence of malware at those stores, it is also offering the protection services to customers there as well.

A number of retailers have suffered security breaches in recent memory.

During last year's holiday shopping season, Target Corp. disclosed that it was hit with an attack that exposed details of as many as 40 million credit and debit card accounts. Home Depot announced in September that a affected 56 million debit and , and later said hackers also stole 53 million email addresses. And the cyberattack on Sony Pictures Entertainment that came into the spotlight this week has put a number of companies on high alert to attend to the security of their own networks.


Explore further

Kmart becomes latest retailer hit by data theft

© 2014 The Associated Press. All rights reserved.

Citation: Staples: Customer data exposed in security breach (2014, December 19) retrieved 19 July 2019 from https://phys.org/news/2014-12-staples-customer-exposed-breach.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.
0 shares

Feedback to editors

User comments

Dec 20, 2014
Within the purview of cyber-security, only two types of companies, those who know they've been hacked, and those who haven't discovered it yet.

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more