

Chang’s responded by going low-tech and using age old manual credit card imprinting machines to take payment in its stores, which it then upgraded to new “encryption-enabled terminals”.Ĭhang’s is still working with the US Secret Service to discover the identity of the hackers. Stolen records were being sold for between $18 and $140, with the price depending on how fresh the stolen data is. Chang’s locations between the beginning of March 2014 and May 19, 2014.”Ĭriminals managed to hack P.F Chang’s point of sale machines and record credit and debit card data, which then found its way on to the black market.


Several banks had gotten in touch with Brian Krebs, a security journalist, to say that “they acquired from this new batch, multiple cards that were previously issued to customers, and found that all had been used at P.F. Chang’s didn’t specifically mention how many customers had been affected, but thousands of newly stolen credit and debit cards went up for sale online on June 9th. The chain restaurant suffered a huge data breach last month that compromised customer payment information. Not to mention the bank details of all health department employees. If they did, hackers would’ve gained access to highly personal information such as Social Security numbers, medical records, medical insurance records, names, addresses and birth certificates. Richard Opper, director of the state's Department of Public Health and Human Services, said that there’s “no indication” the hackers accessed the information or used it inappropriately. It’s not clear if the attackers made-off with sensitive information, or if it had been used or sold on the black market. The state government said that it is notifying 1.3 million people including current and former residents, families of the dead and anyone else whose personal information may have been accessed in the attack. The hack actually happened in July last year, but it wasn’t discovered until May this year, with the identity of the intruders, and the extent of the damage done, still unclear. The State of Montana’s health department revealed that a data breach may have affected more than 1 million people. Despite the huge data breach and the sensitivity of the data, the SEA said that it was a “hacktivist operation” and that they “didn’t do it to hack people’s accounts”. Although there were further concerns that the stolen personal information could leave eBay users vulnerable to identity theft.ĭespite eBay not confirming who was behind the attack, the notorious Syrian Electronic Army claimed responsibility. eBay encouraged users to change their passwords and reassured them that financial information was not stolen, as it’s stored separately and encrypted. Hackers successfully stole eBay credentials and managed to gain access to sensitive data.
