ABSTRACT

Staples confirmed in October 2014 that it was investigating a possible cyber-attack on its retail stores in the United States. They confirmed that an estimated 1.16 million credit cards may have been affected during several attacks that occurred this summer and early this fall. Staples said that 115 of its US retail locations, out of more than 1,400 total in the United States, were attacked using malware that provided hackers with names, credit and debit card numbers, expiration dates, and verification codes. One hundred thirteen stores were attacked between August 10 and September 16, Staples said, while two additional ones were infected with malware between July 20 and September 16. Fraudulent cards were used in four stores in Manhattan, New York, Staples said, but were not able to find any malware on its systems in those locations.