AT&T Tech Support 360
- Related Stories
-
Congressman wants retailer ID'd in data breach
February 15, 2006 -
Banks scramble on debit card theft
February 13, 2006 -
Web of intrigue widens in debit-card theft case
February 11, 2006 -
FBI makes connections in data breach case
February 10, 2006
The FBI's Sacramento bureau initially took control of the investigation. Last week, it was moved to the FBI office in Charlotte, N.C., after officials there learned that the case might be related to one of their investigations, said Special Agent Karen Ernst, the spokeswoman for the Sacramento office. She and FBI officials in Charlotte declined to provide details about the Charlotte investigation.
Starting late last year, banks and credit unions, mostly in California, began issuing new debit cards after some account holders discovered fraudulent withdrawals at overseas ATMs. Banking officials said they traced the problem to a security breach involving at least one major retailer.
Neither the banks nor credit card companies, such as Visa and MasterCard International, would disclose the name of the merchant.
As first reported by CNET News.com, an initial investigation into the matter revealed that the case might involve two separate retail chains--one that has acknowledged a problem and another whose possible role is uncertain.
Asked whether the FBI's investigation in Charlotte involved any retailers, Ken Lucas, the bureau's spokesman, declined to name industries or particular businesses but said that "there's a potential out there that a number of companies could be involved."
One company that has acknowledged a security breach is the United States' largest retailer, Wal-Mart Stores.
In December, Wal-Mart acknowledged that credit cards used by some customers who bought gas at the company's Sam's Club stations between Sept. 21, 2005, and Oct. 2, 2005, had been compromised. Many Sam's Clubs also accept debit cards.
There are more than 500 Sam's Clubs in the United States.
But the trail doesn't end with Wal-Mart, sources close to the investigation have said. As investigators began to look into the rash of unauthorized charges, they found that a large number of people whose debit cards were compromised had one thing in common: They previously had shopped at office-supply chain OfficeMax, said a banking source familiar with the case. Two law enforcement sources also said OfficeMax is part of the investigation but did not provide details.
None of the sources, who requested anonymity due to the ongoing investigation, knew for certain whether OfficeMax had suffered a security breach.
OfficeMax said it has not suffered any security breaches.
According to one banking official close to the case, OfficeMax has been queried by at least one financial institution about the matter.
See more CNET content tagged:
OfficeMax Inc.,
debit card,
Charlotte,
security breach,
investigation
OfficeMax might not be aware of breach of security because it might involve just a few employees, and the data might be stolen by a cashier without any problem in their own system. At the point where the card is being read the data can be compromised using a hardware keyboard-logger, just like those used in in public web access points. The Retailer might not be aware that an employee does this.