Hackers exploit a Staples system flaw to create gift cards worth €4.3 million
An organised crime group from China exploited a weakness in the customer support system of US retailer Staples and fraudulently created more than 15,000 gift cards. Their total value is about €4.3 million.
An organised crime group from China has exploited a security weakness in the customer support system of the US retailer Staples to fraudulently create more than 15,000 gift cards. Their combined value is about €4.3 million. The scheme is described in US court documents reviewed by 404 Media, an outlet that covers technology and cybersecurity.
How the money was used
According to the court materials, the funds obtained through the gift cards were later spent on electronics, mainly Apple devices. The equipment was then shipped to Asia.
Why it matters
The case shows that attackers may target not only customer data but also internal support systems, through which they can generate payment instruments that are easy to turn into goods. Gift cards are useful in such schemes because they can be spent on electronics.
The available text of the report does not explain exactly how the attackers used the flaw, when it happened, or whether anyone has been charged. Those details are not confirmed, so they are not included here.
