Three Canadian locations of department store Saks were exposed to the data breach that parent company Hudson's Bay Co. disclosed over the weekend, says a New York-based cybersecurity firm.
Hudson's Bay, known as HBC, released little information Sunday on the breach itself, but Gemini Advisory LLC said it had analyzed the available data and found information from five million credit cards had been compromised.
Gemini said in a report that the information was stolen from 83 Saks Fifth Avenue or Saks Off Fifth stores, and from all locations of Lord & Taylor, a U.S. department store chain owned by HBC.
The firm found that three Canadian Saks locations, all in Ontario, were exposed to the breach:
- Sherway Gardens in Toronto.
- Bramalea City Centre in Brampton.
- Pickering Town Centre.
HBC itself hasn't said whether any of its Canadian locations were affected. It says the investigation is ongoing, but there's no indication the breach affected the company's digital platforms or Hudson's Bay and Home Outfitters stores.
Influx of stolen credit card data
Dmitry Chorine, the co-founder of Gemini Advisory, said his firm works to improve response to data breaches by analyzing stolen data appearing on the so-called dark web.
Chorine said the firm started looking into the breach when it noticed an influx of stolen credit and debit card information being offered for sale on the dark web last week.
Upon analyzing the data, Chorine said the firm was able to determine that shoppers at all Lord & Taylor and at certain Saks locations were at risk of having their information stolen.
"On March 28, we saw a significant spike of stolen credit cards offered for sale on one of the marketplaces," Chorine said.
"When we checked, we saw there was an advertisement stating that more than five million credit and debit cards will be offered for sale, and that's when we decided to research this particular breach."
The data that Chorine and his team found were being offered on a dark web marketplace operated by a hacking group called JokerStash, which Chorine says has been active in hacking retail and hospitality companies for the past three years.
Gemini Advisory said Sunday it had found stolen data on 125,000 payment cards dating from as early as March 2017 and as late as March 2018. About 75 per cent of the credit and debit cards appear to have been taken from the HBC-owned retailers.
Chorine said only certain Saks locations were affected because the outlet was in the process of switching from card-swipe technology to EMV chip technology, which is already commonly used in Canada.
Customers not liable for charges, HBC says
HBC said there could be fraudulent charges to customers' accounts because of the breach, but added those customers won't be liable to pay them.
It's asking clients to review their account statements to see if there have been activity or transactions they don't recognize.
The company said it will notify customers affected by the breach as quickly as possible and will offer free identity protection services once they learn more about the breach.
The company also said there's no indication social security numbers or driver's licence information were affected by the breach.
Latest USA News
- Mental illness cited in deaths of Steinbach father and son
- Brrrrr-utal! Spring temperatures likely weeks away
- Wheeler, muckers lead way to victory
- Civil trials moving at brisker pace
- Taking a stand against harassment
- City eyes traffic lights at site of fatal collision
- Winnipeg has love affair with horror
- Waste not, want not
- A valuable space, lost in litigation
- Free Press Head Start for April 3
- Secret life of plants making music
- Ex-Hydro chairman refutes premier
- Wire-to-wire world champ
- Optimism shines bright at upbeat Juno Awards show in Vancouver
- Canada joins U.S., Europe in expelling Russian spies for British poison attack
- Feds ease restrictions on prescription heroin to address opioid epidemic
- Mexico official: Iowa family died from water heater gas leak
- White House: Trump thinks Stormy Daniels lied about threat
- Developer to alter Pembina Highway apartment plans
- It's a great time to be a sports fan in Winnipeg
- He has the answers
- Manitoba announces operators of legal cannabis stores
- Feds to help Churchill residents pay high cost of gas
- Journalism still necessary in Canada: survey
- Getting into the weeds
- A call for justice
- Family, friends gather to protest reduced sentences for young offenders convicted of killing Serena McKay
- Two people dead in fatal trailer fire in Grand Rapids
- 200 mourners attend funeral for boy killed at crosswalk
- Jets penalty killing third-best in the league
- New lease on life for Boyd Building
- Environment Canada issues extreme cold weather warnings for much of the country
- Film festival will promote black film makers
- Manitoba Theatre reports surplus
- Frigid temperature doesn't stop shoppers
- Thief nabs $30,000 worth of veal in stolen trailer on Christmas Day
- On a cold winter's night... their last Noel
- Quiet change to free downtown parking called deceitful
- Local shelters ensure everyone gets a warm bed during cold snap
- Thieves not idle: police warn drivers about increase in car thefts