Hackers Reportedly Used Staples Support Tool to Mint $5M in Gift Cards

Attackers exploited memory dumps in Staples' Nexus support tool to hijack employee sessions and issue gift cards without stealing passwords. Over 15,000 fraudulent cards worth more than $5 million were allegedly generated, with about $425,000 redeemed across 85 Target stores and other retailers in two days.

• More than 15,000 cards worth over $5 million were allegedly generated
• About 3,850 cards worth $141,000 were redeemed at 85 Target stores in two days
• Sephora and Lowe's reported losses of $58,600 and $226,000
• The attack bypassed payment terminals by targeting an internal support tool