Breach, Data Security

Retailer Bebe suffers breach, stolen cards sold online

Bebe, a woman's clothing chain, is apparently the latest retailer targeted in a data breach, with fraudulent charges showing up on credit cards.

A number of financial institutions noticed the fraudulent activity on their customers' cards and the common denominator was that they'd all shopped recently at Bebe, according to Brian Krebs. 

One bank reported that some of its customers' cards were discovered for sale on Goodshop (goodshop.bz), a black market forum. The bank purchased the cards, as part of what was billed as a “Happy Winder Update” and which sold for between $10-$27 apiece, Krebs reported.

He revealed that the cards were used in the retailers U.S. stores between Nov. 18-28, but said that it was unclear whether the breach was ongoing. Reports of the Bebe breach come as the one-year anniversary of the massive Target breach rolls around.

UPDATE: The retailer has confirmed the data breach that exposed customer payment card information.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.