The corporate hacks keep coming. The latest target, according to cybersecurity blogger Brian Krebs, is the beauty supply chain Sally Beauty (SBH), a retailer that draws customers from salons and other stylists.
A new batch of 282,000 stolen debit and credit cards were posted for sale this week on underground marketplaces, and Krebs believes they have been used at one of Sally Beauty’s 2,600 stores. It’s the latest scoop from Krebs, who has managed to penetrate the criminal underground to break major stories, including the Target (TGT) and Neiman Marcus hacks.
He used a similar technique to help triangulate the source of the Sally Beauty data breach, working with banks to buy back some of their compromised cards and analyze which stores had transactions on each account. Krebs says the underground marketplaces offering the stolen Sally Beauty card data were also affiliated with the same young Ukrainian man whom he has linked to sales of data purloined from Target