This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1637

SUMMARY

Employee steals customers credit card numbers using a card skimming device
Records	3,990
Record Types	CCN
Breach Type	Fraud Se
Data Family	Unknown
Source	Inside - Malicious
Organization	Best Buy
Other Affected/Involved Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	YES
Submitted By:	kirniki

records	date	organizations
8,000	2006-05-18	American Red Cross
3,448	2008-09-25	AmeriCredit Financial Services, Inc.
5,400	2008-12-19	Norfolk Southern Corp., Imaging Solutions & Services Inc.

Date	Event
2009-01-05	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: Are you human?
None. Add Data	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: Are you human?
2009-02-02	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: Are you human?
2009-02-04	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: Are you human?
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: Are you human?
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: Are you human?
2009-01-07	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: Are you human?

Address: 1880 Palm Beach Lakes Blvd, West Palm Beach, FL 33401, USA
Have a better address for this incident? Suggest it!

No known costs for this incident.

Ponemon Institute Direct Costs Estimate ¹

$239,400.00

Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

add details to this primary source Description
Best buy notification regarding a card skimmer used by an employee to steal customer credit cards.
Filename	Source	Researcher	Incident IDs
best_buy.pdf	New Hampshire Consumer Protection & Antitrust Bureau	kirniki	<a href='/incidents/show/1637'>1637</a>
Records	File Date	Uploaded	Updated
1	2009-02-02	2009-02-04	04 Feb 14:02
Excerpt
’ ° { i §E§Y Ei} Y,. itébrucvd Y, ZQOQ fwieaw irvlcmvpsiiiree i.)sirni b...

add details to this primary source Description
Employee steals customers credit card numbers using a card skimming device
Filename	Source	Researcher	Incident IDs
ITU-166413.pdf	Maryland Attorney General	kirniki	<a href='/incidents/show/1637'>1637</a>
Records	File Date	Uploaded	Updated
19	2009-02-02	2009-03-27	25 Jun 21:44
Excerpt
Q A ;i; ; A _ "`i`i"i"—'}=ic·e, ., L TM A V lwél`iY"l' r, ,, r'i’;Y~;· V, - !T?§{;&r. T ii BEST BUYM it A { iliztr . ’ i Februa 2, 2009 — — ` W 3 D /= it jr i ’* l Otlice ot th...

add details to this primary source Description
Employee steals customers credit card numbers using a card skimming device
Filename	Source	Researcher	Incident IDs
20090202_best_buy_ME.pdf	Maine Attorney General	d2d	<a href='/incidents/show/1637'>1637</a>
Records	File Date	Uploaded	Updated
1	2009-02-02	2009-05-06	07 May 12:32
Excerpt
CONSUMER PROTECTION DIVISION . BEST BUY RECEIVED TM FEB 1 February 2, 2009 I L OFFICE OF ATTOFRWEY GENERAI., Office ofthe Attorney General F 6 State House Station By UPS Express Augusta, Maine 04333-...

add details to this primary source Description
North Carolina Data Breach Notification : Employee used card skimming device to capture credit card information.
Filename	Source	Researcher	Incident IDs
20090205_best_buy.pdf	North Carolina Department of Justice, Consumer Protection Division	d2d	<a href='/incidents/show/1637'>1637</a>
Records	File Date	Uploaded	Updated
11	2009-02-05	2009-06-13	14 Jul 22:53
Excerpt
. ·¤ .. . 77 y- pl .7 , .-_ y,; , Jr; i g‘ l. l l‘~Ie·r·tli Carolina Security Breach Reporting Form y F1 . at it · *ifj 'Vtéeft Proteciirut 7-% it 0f2005 Name o1"Business Ownng...

add details to this primary source Description
Letter to Customers : Employee at Best Buy has been arrested for stealing credit card information using their own device.
Filename	Source	Researcher	Incident IDs
FL_best_buy.pdf	Florida Attorney General	infolock	<a href='/incidents/show/1637'>1637</a>
Records	File Date	Uploaded	Updated
Not yet entered	Not yet entered	2009-06-23	03 Aug 22:04
Excerpt
BEST BUYA Date Consumer Name Consumer Address Consumer City, State, Zip Code Promotion Code; #####—?at####t¢%## Account number: xxxx Dear Valued Customer; The Best Buy store located at 1880 Palm Be...

add details to this primary source Description
Massachusetts Data Breach Notification : Employee used card skimming device to capture credit card information. 22 MA resident affected.
Filename	Source	Researcher	Incident IDs
20090202-best-buy-MA.pdf	Massachusetts Attorney General	d2d	<a href='/incidents/show/1637'>1637</a>
Records	File Date	Uploaded	Updated
22	2009-02-02	2010-04-27	12 Aug 23:44
Excerpt
.. BEST BUYL February 2, 2009 Attorney General Martha Coakley , Office of the Attorney General » One Ashburton Place BY UPS Express A Boston, MA 02l 08 Subiect: .Natification Related to Massachusetts...