← Subway

2011 — Subway: Over 150 Subway franchises and at least 50 other…

2011 80.0K records affected Share on X

Data compromised

Personal information

Technical writeup

Over 150 Subway franchises and at least 50 other small retailers had customer data hacked from their point-of-sale (POS) systems.  Four Romanian hackers were indicted for hacking and misusing the credit card information between 2008 and May of 2011.  Over $3 million in fraudulent charges on customer cards was obtained by scanning the internet for vulnerable POS systems and then easily breaking the passwords to these systems. Keyloggers and a backdoor were also installed to allow further access t

Root cause

Hacking

References