Hackers broke into a back-end server that processes transactions for Citibank-branded ATMs at thousands of 7-Eleven convenience stores and scooted away with at least $2 million. This attack came about because the hackers apparently breached the network and installed software onto a back-end machine that allowed them to siphon off account numbers and PINs without anyone being the wiser.
Understandably, nobody is furnishing details of just how such a hack could have occurred, though Citibank is putting the blame on Houston-based Cardtronics. Cardtronics runs the transaction processing side of the operation for 2,000 machines. As of last month, Citibank is still revoking compromised cards belonging to its customers. It is known that 10 people have been arrested so far in relation to this case.
For more on Citibank ATM hack:
- check out this Wired blog [1]
Links:
[1] http://blog.wired.com/27bstroke6/2008/07/atm-owner-cardt.html