← Sears Holdings

2017 Kmart payment card breach

2017 Unknown records affected Share on X

Data compromised

Payment card numbers

Technical writeup

May 2017. Malware on Kmart store payment systems infected some of 735 locations. Credit/debit card data stolen; no names, addresses, SSNs, or emails. Malware undetectable by antivirus. Second Kmart breach in under 3 years. Sears.com and Kmart.com not impacted. EMV rollout limited counterfeit card risk.

Root cause

POS malware; payment card skimming.

References