Costco has confirmed a card skimming attack that forced them to send out notification letters to victims last week.
In a statement to ZDNet, the global retail giant said that in August, they discovered five card skimmers on payment card devices in four of their Chicago-area warehouses.
“We promptly removed the skimmers, notified law enforcement, and engaged a forensics firm to analyze the devices,” a Costco spokesperson said.
“It appears that these skimmers had the ability to capture information on the magnetic stripe of a payment card, including name, card number, expiration date, and CVV. We identified the members who conducted swipe payment card transactions on the affected devices during the relevant time period and notified them individually. We also offered them complimentary credit monitoring and identity theft-related services,” the company added.
The spokesperson said less than 500 customers were affected by the situation and that all of the customers were notified by letter on November 5.
The company believes the attack took place in August but did not answer questions about how long they believe the card skimmers were active.
Costco inspectors did not find similar card skimmers at any other locations, according to their spokesperson. Costco is the fifth largest retailer in the