Credit, debit card numbers from Hy-Vee hack may be sold online

New 9 o'clock: A new report reveals more than 5 million credit and debit card numbers – related to the data breach on Hy-Vee – are being sold on the dark web. It is according to the internet security blog "Krebs on Security". Beau Bowman, KCCI, is in the newsroom right now. Hy-Vee has not yet contacted the Attorney General's office – because it does not know how much of the stolen data came from their stores – like the one behind me. Security blogger Brian Krebs reports 5.3 million credit and debit card accounts stolen in violation of Hy-Vee data – are sold on the dark web. Lynn Hicks with the Iowa Attorney General's Office says that if the numbers are correct, this would be one of the biggest data breaches they have ever seen. KCCI first told you about the breach of the last time the Hy-Vee survey focused on card transactions at fuel pumps, drive-through coffee shops and restaurants such as the Hy-Vee Market Grille. Hy-vee told KCCI on Friday – internal investigations are just underway, and officials are sure how many of the 5million accounts were actually stolen from Hy-Vee. Hicks says not much is known about the breach yet – but there isn't much they can do to catch the person who stole the account information. Hy-Vee said Friday that it is aware that payment data was offered for sale – and that they are working with card companies to find out which account was stolen. Hy-Vee's investigation has just begun, and they are not required by law to notify the Attorney General before notifying clients. Stacey?

Credit, debit card numbers from Hy-Vee hack possibly sold online

Updated: 21:40 CDT August 23, 2019

A security expert warns credit and debit card numbers hacked from Hy-Vee's gas stations and restaurants are now being sold on the dark web. Brain Krebs, the owner of Krebs Security, said the hacked account numbers are being sold under the code name Solar Energy by a site called Joker's Stash. Krebs said the numbers are being sold for $ 17 to $ 35 a piece. Hyvee sent KCCI the following: "We are aware of reports from payment processors and card networks for payment data offered for sale, and are working with payment card networks to identify the cards and work with issuing banks to initiate increased monitoring of accounts."

DES MOINES, Iowa –

A security expert warns credit and debit card numbers hacked from Hy-Vee's gas stations and restaurants are now being sold on the dark web.

Brain Krebs, the owner of Krebs Security, said that the hacked account numbers are being sold under the code name Solar Energy by a site called Joker & # 39; s Stash.

Krebs said the numbers are being sold for $ 17 to $ 35 a piece.

Hyvee sent KCCI the following: "We are aware of reports from payment processors and card networks for payment data offered for sale, and are working with payment card networks to identify the cards and cooperate with issuing banks to initiate increased account monitoring. . "

Source link