Saks, Lord & Taylor: 5 Million Debit and Credit Card Details Stolen

Card information from charges in-store at Sakes Off 5th and Lord & Taylor have been found vulnerable online.

• By Sydny Shepard
• Apr 03, 2018

Hackers have stolen information for more than 5 million credit and debit cards used at Saks Off 5th and Lord & Taylor Stores.

Hudson's Bay Company, which owns the retail chains, confirmed the breach on Sunday and said it has "identified the issues and has taken steps to contain it."

"Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protective services, including credit and web monitoring," Hudson's Bay said in a press release.

The company added that the cards were used for in-store purchases and at the time of the press release, there was no indication that cards used to purchase items online were affected. Hudson's Bay is cooperating with law enforcement in an ongoing investigation.

A cybersecurity firm called Gemini Advisory identified the breach and posted a blog detailing its scope. The "attack is amongst the biggest and most damaging to ever hit retail companies," the blog post said.

Gemini Advisory said a hacking syndicate put credit and debit card information it obtained from the hack up for sale on the dark web last week.

A "preliminary analysis" found credit and debit card data was obtained for sales dating back to May 2017, according to the post. The breach most likely impacted more than 130 Saks and Lord & Taylor locations across the country, but the "majority of stolen credit cards were obtained from New York and New Jersey locations."

The hackers have also been behind the notorious data breaches that affected companies including Whole Foods, Chipotle, Omni Hotels & Resorts and Trump Hotels.