International beauty chain Sally Beauty appears to be the latest victim of a breach targeting its stores' payment systems, according to banking industry sources and new firsthand data on underground cyber forums for the trafficking of stolen credit and debit cards.
On March 2, a new batch of 282,000 stolen credit and debit cards were up for sale on a popular underground forum. Three different banks contacted KrebsOnSecurity and made targeted purchases of the credit cards they had issued to their customers.
Each of the banks then looked to see if all of the cards they purchased had been used at the same merchant during the same time period. This test, known as a “common point of purchase,” or CPP, is how financial institutions can determine the source of the card breach.
