Credit Accounts Hacked At East Bay Wholesaler, Customers Say
OAKLAND (CBS 5) – Some customers of an East Bay restaurant supply store told CBS 5 that their credit card accounts were hacked. But a representative of Jetro Cash and Carry in Oakland was not eager to talk about it.
An assistant branch manager held reporter Robert Lyles inside the store for a time and said he did not know anything about the hacking.
Jetro customer Miguel Leon told CBS 5 that thieves were swiping his business card in New York City, buying more than $100 in subway cards on Thanksgiving morning and at McDonald's.
"I wasn't in Brooklyn, I was in my house in Concord," Leon said.
Leon, who owns Ana Rosa's Mexican Restaurant in San Leandro, said he shops at Jetro 2-3 times a week and only uses the card at the store and at gas stations.
An investigation revealed thieves recorded credit card numbers, expiration dates and verification codes with malware installed at stores between September to mid-November. Credit card data was sent to a server in Russia, and counterfeit cards were made.
An Oakland restaurant owner, who didn't want his name or business revealed, told CBS 5 that his credit account was hit for thousands of dollars.
According to the owner, thieves charged more than $4,500 at Walmart stores in Vallejo and Union City on Black Friday. The following day, another $200 was charged at H&M. Thieves also charged more than $500 at a CVS and more than $550 at a Foot Locker, both in San Mateo.
In an email to CBS 5, Jetro corporate offices said the company hired forensic investigators who found the malware.
"At this time, Trustwave investigators continue their investigation and they will take any necessary additional steps to eliminate the threat caused by the malware," said CEO Stanley Fleishman in a statement.
Jetro has not specified how many customers are affected or how many stores were found with malware. The wholesaler suggests customers who may have been affected to contact their bank.
(Copyright 2011 by CBS San Francisco. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed.)