Hudson’s Bay Data Breach Among ‘Most Damaging’ In Retail

Some Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores suffered security attacks on their in-store point-of-sale systems last year, leading to about 5 million credit and debit card numbers being stolen, according to a New York Times story that referenced a report from security research firm Gemini Advisory. Russian hacker syndicate Fin7 appears to have been responsible, according to Gemini Advisory. The hacker group has so far offered about 125,000 stolen card numbers — the majority of them obtained from New York and New Jersey stores — for sale on the dark web. The Hudson’s Bay Company, which owns all three of the retail store brands affected, subsequently confirmed in a statement that certain stores had been affected by a “data security issue,” that it is continuing to investigate the incident and that it will offer further details to affected customers as the investigation progresses. Read more at Retail Dive.