Fergie's Tech Blog

Advance Auto Parts Breach Included Unencrypted Payment Data From 2001

Evan Schuman writes on StorefrontBacktalk:

Unencrypted customer credit card information dating back to 2001 was among the customer payment data stolen from as many as 56,000 customers of Advance Auto Parts, according to one company official, who added that the chain is not PCI compliant.

The $4.8 billion automotive aftermarket parts chain—which dubs itself the nation's second largest such chain, with 3,261 stores in 40 states, Puerto Rico and the Virgin Islands—said the breach appears to have impacted customers from 14 of its stores in Georgia, Ohio, Louisiana, Tennessee, Mississippi, New York, Virginia and Indiana.

The breach—which revealed check, credit card and debit card data—apparently happened in February 2008 and was discovered "in early March," said Shelly Whitaker, the manager of public communications for Advance Auto Parts.

posted by Fergie @ 4/11/2008 11:45:00 AM