18 Mar 2014

Credit Card Data of 25,000 Shoppers Stolen

Beauty retailer Sally Beauty Holdings suffered a security breach during an update of its point-of-sale machines in its US stores, according to Tech World.

The Texas-based company said 25,000 records containing credit card data were accessed and possibly removed during the operation. Only the card number and expiration data were at risk.

The cause of the incident was not stated. "As experience has shown in prior data security incidents at other companies, it is difficult to ascertain with certainty the scope of a data security breach/incident prior to the completion of a comprehensive forensic investigation," the company said.

In its annual report, Sally Beauty warned of the risks of “disruption” during the implementation of the new POS systems. The company did not specify what type of POS was to be installed and said third-party service providers were not involved.

Sally Beauty Holdings is an international retailer and distributor of professional beauty supplies, selling through 4,700 stores in the United States, the United Kingdom, Belgium, Chile, France, the Netherlands, Canada, Puerto Rico, Mexico, Ireland, Spain and Germany.