2018 Saks/Lord & Taylor — 5M credit cards
Data compromised
Credit and debit card numbers, expiration dates
Technical writeup
Saks Fifth Avenue and Lord & Taylor (both Hudson's Bay brands) suffered a breach in 2018 when malware was installed on point-of-sale systems. Approximately 5 million credit and debit card records were stolen. The breach affected stores across North America over several months.
Root cause
POS malware; card skimming