For $10-$27 a card, you can get a new (stolen) credit card for a loved one!
The breech seems to have been between November 18 and 28, but it is unclear if it might have started earlier or possibly still be on-going. Bebe decided they didn't want to talk to Krebs, so apparently they're still in denial. Evidence suggests that this was another card reader compromise and that their online store was not breeched.
One thing that I don't know since I don't know anyone who shops there is how valuable the cards are. If Bebe is a high-end store, the cards could be worth a lot. Also, the cards are up for sale in a hitherto not known carder forum, so the stolen card retailers have another store that you can buy from.
http://krebsonsecurity.com/2014/12/banks-credit-card-breach-at-bebe-stores/
UPDATE: Bebe confirmed the breech.
"Bebe stores said its investigation indicates that the breach impacted payment cards swiped in its U.S., Puerto Rico and U.S. Virgin Islands stores between Nov. 8, 2014 and Nov. 26, 2014. The data may have included cardholder name, account number, expiration date, and verification code." They claim the breech has been stopped.
So at least they caught it before Black Friday, that greatly reduces the number of compromised cards.
http://krebsonsecurity.com/2014/12/bebe-stores-confirms-credit-card-breach/
The breech seems to have been between November 18 and 28, but it is unclear if it might have started earlier or possibly still be on-going. Bebe decided they didn't want to talk to Krebs, so apparently they're still in denial. Evidence suggests that this was another card reader compromise and that their online store was not breeched.
One thing that I don't know since I don't know anyone who shops there is how valuable the cards are. If Bebe is a high-end store, the cards could be worth a lot. Also, the cards are up for sale in a hitherto not known carder forum, so the stolen card retailers have another store that you can buy from.
http://krebsonsecurity.com/2014/12/banks-credit-card-breach-at-bebe-stores/
UPDATE: Bebe confirmed the breech.
"Bebe stores said its investigation indicates that the breach impacted payment cards swiped in its U.S., Puerto Rico and U.S. Virgin Islands stores between Nov. 8, 2014 and Nov. 26, 2014. The data may have included cardholder name, account number, expiration date, and verification code." They claim the breech has been stopped.
So at least they caught it before Black Friday, that greatly reduces the number of compromised cards.
http://krebsonsecurity.com/2014/12/bebe-stores-confirms-credit-card-breach/