Stay Curious. Stay Connected.
MailNewsletters♡Donate Now
Sign up
*Password must be at least 8 characters and contain one uppercase letter, one lowercase letter, one number and one symbol.
Already have an account?
By submitting, you consent that you are at least 18 years of age and to receive information about MPR's or APMG entities' programs and offerings. The personally identifying information you provide will not be sold, shared, or used for purposes other than to communicate with you about MPR, APMG entities, and its sponsors. You may opt-out at any time clicking the unsubscribe link at the bottom of any email communication. View our Privacy Policy.
Sign in to your profile
Forgot Password?
New to MPR News?
Welcome back
to news
for you
Reset Password

Enter the username on file and we'll send you a code to reset your password.

Still require assistance or not sure what your User Name is?
Welcome back
to news
for you
Email Verification

A verification code has been emailed to

Still awaiting the code?

Kmart says its store registers were hacked, exposing credit cards

Go Deeper.

Create an account or log in to save stories.

Log inCreate a free Account

Like this?

Thanks for liking this story! We have added it to a list of your favorite stories.

Show me!
Kmart says it has removed malware that had infected its checkout registers in stores. The company believes the malware may have been in place for about a month before it was detected.
Kmart says it has removed malware that had infected its checkout registers in stores. The company believes the malware may have been in place for about a month before it was detected.
Rachel Murray

For about a month, Kmart says, its stores' checkout registers were "compromised by malicious software that stole customer credit and debit card information."

The company, owned by Sears, says it removed the malware from its system after it was discovered Thursday. It announced the exposure late Friday, saying that no personal data or PIN numbers were lost.

While some important customer information seems to have been protected, the breach could still allow criminals to make counterfeit versions of the exposed credit cards.

The company announced the problem on its website, along with recommendations that "If customers see any sign of suspicious activity, they should immediately contact their card issuer." The company also says customers can get more information at its website and over the phone at 888-488-5978.

The number of customers in question hasn't been announced; the vulnerability did not affect online shoppers, the company says.

Saying the breach likely began in early September, Sears announced that to protect anyone "who shopped with a credit or debit card in our Kmart stores during the month of September through yesterday (Oct. 9, 2014), Kmart will be offering free credit monitoring protection."

The data breach affected only "track 2" data, reports security expert Brian Krebs, citing a Sears spokesman who says the information "did not include customer names, email address, physical address, Social Security numbers, PINs or any other sensitive information." With Friday's announcement, the retailer joins Target, Neiman Marcus and Home Depot on the list of large companies whose customers' data was accessed illegally in the past year. Copyright 2019 NPR. To see more, visit https://www.npr.org.