Scam Artists Steal Credit Card Information From Nordstrom Registers

Is your retail operation PCI compliant?

Often, scam artists who use debit and credit card skimmers target ATMs. However, they are now using inexpensive skimming devices to compromise the security of modern-day cash registers.

In early October, a group of three men installed keyloggers in registers at a Nordstrom department store in Aventura, Florida. According to Nordstrom, the staff found six skimmers attached to registers at the store.

The three males were captured on camera at Nordstrom on Saturday, October 5^th. They appeared to be tampering with registers: with two men distracting the sales staff, while the third man took pictures of the register, and removed the rear access panel to take more photographs.

A few hours later, three different men returned to the store and went through the same exact process. However, instead of taking pictures, one man installed the keyloggers in the registers.  A few days later, the same men returned to remove them with the intent to use stolen information to create counterfeit credit cards.

The keyloggers used resemble PS/2 keyboard connectors, which are sold by many stores for $30-$40 each. These keyloggers are connected with a keyboard cord between the keyboard and the computer, and have the ability to intercept data from credit cards and transfer it between the two devices.

According to a Nordstrom spokeswoman, the company believes the incident only took place at this particular store, and no other. It’s uncertain whether or not the men caught on camera have been arrested.

Have questions about your Ottawa retail store and your PCI compliance?  Contact Fuelled Networks today and sit down with our team of Ottawa IT security specialists.  We can help you ensure all your payment systems meet PCI compliance.