[ISN] Global ATM Caper Nets Hackers $9 Million in One Day

From: InfoSec News <alerts_at_private>
Date: Wed, 4 Feb 2009 00:07:18 -0600 (CST)
http://blog.wired.com/27bstroke6/2009/02/atm.html

By Kevin Poulsen 
Threat Level
Wired.com
February 03, 2009

A carefully coordinated global ATM heist last November resulted in a 
one-day haul of $9 million in cash, after a hacker penetrated a server 
at payment processor RBS WorldPay, New York's Fox 5 reports.

RBS WorldPay announced on December 23 that they'd been hacked, and 
personal information on approximately 1.5 million payroll-card and 
gift-card customers had been stolen. (Payroll cards are debit cards 
issued and recharged by employers as an alternative to paychecks and 
direct-deposit.) Now we know that account numbers and other mag-stripe 
data needed to clone the debit cards were also compromised in the 
breach.

At the time, the company said it identified fraudulent activity on only 
100 cards, making it sound like small beans. But it turns out the hacker 
managed to lift the withdrawal limits on those 100 cards, before 
dispatching an global army of cashers to drain them with repeated 
rapid-fire withdrawals. More than 130 ATMs in 49 cities from Moscow to 
Atlanta were hit simultaneously just after midnight Eastern Time on 
November 8.

A class action lawsuit has been filed against RBS WorldPay on behalf of 
consumers.

[...]


_______________________________________________      
Best Selling Security Books &amp; More!
http://www.shopinfosecnews.org/
Received on Tue Feb 03 2009 - 22:07:18 PST

This archive was generated by hypermail 2.2.0 : Tue Feb 03 2009 - 22:12:19 PST