Redbox credit card skimming

[bubba]

just got this in an email from Redbox, incase you don't have it setup for allowing them to email you...

To Our Valued Customers:

A few days ago redbox detected and removed an illegal credit card skimming device at one of our 7,400 locations. At the same time, redbox also discovered evidence of skimming attempts in two other locations. Skimming involves the placement of an illegal device above the credit/debit card reader on a vending machine, ATM, or in this case a redbox. These devices are used to illegally read or store personal credit card information.

Even if your redbox was not targeted, it never hurts to pay a little extra attention and check for any unusual activities or changes at your local redbox. If you suspect your redbox has been tampered with (click this link to see pictures of skimmer devices: http://www.redbox.com/creditcardsecurity/ ) please call 866-REDBOX3, e-mail [email protected] , or notify the store/restaurant manager of your concerns immediately.


Although there is no evidence currently that these skimming attempts were successful, consumer security is a top priority for redbox. Reviewing transaction records, there is a possibility that up to 150 customers may have been affected. Although only a small percentage of the millions of customers who use redbox each month, redbox has notified the major credit card companies so that they can monitor the situation. The redbox team is also working with local authorities to investigate the incidents and ensure your security.


Skimming is not new (click this link for more details: http://www.uboc.com/ ). It has been attempted numerous times on ATMs, gas station pumps, and now redbox has been targeted. Redbox has been aware of these industry threats and has spent significant time and resources to prepare for them. The 7,400 redbox locations are visited frequently by redbox associates to maintain smooth operations and an optimum customer experience. In this case, a redbox associate found evidence of skimming attempts and initiated the actions in the team's response plan (including this e-mail message).


Redbox greatly values our customer relationships. As a result, redbox is open and direct in our communications about this type of situation. The redbox team also utilizes industry-leading technology to ensure you have a safe shopping experience and aggressively combats attempts by criminals to defraud customers. Please see the questions and answers below for some additional details on skimming and how redbox ensures the safety of your account information.


Sincerely,

Trina Graham-Hodo
Director, Customer Service
Bill Caputo
Director, Security

Additional Questions / Answers:

Q. What is credit card skimming?

A. Skimming is the theft of credit card information used in an otherwise legitimate transaction. It often involves the placement of an illegal device above the credit/debit card reader on a vending machine, ATM, or in this case a redbox. For more info click these links:
http://en.wikipedia.org/wiki/Credit_card_fraud#Skimming
http://www.uboc.com/about/main/0,,2485_ ... 51,00.html

Q. What does redbox do to protect consumer credit card information?

A. Redbox employs state-of-the-art security technology to ensure the privacy and security of our customers' data before, during, and after their visit to our kiosks. Customer credit card information is encrypted the moment it's swiped through our readers. Redbox uses further layers of encryption to protect all data transfers, too. Kiosks are also actively monitored and regularly inspected both on-site and remotely. Redbox never moves or stores unencrypted customer information. Credit card information can not be accessed by outsiders or even by redbox employees once the card is swiped at a kiosk.


Q. Where can I get more information on credit card skimmers?

A. Please use these links to get more information on credit card skimmers:
http://en.wikipedia.org/wiki/Credit_card_fraud#Skimming
http://www.usatoday.com/tech/news/compu ... ards_N.htm
http://www.uboc.com/about/main/0,,2485_ ... 51,00.html


Q. How do I know if a skimmer is on my redbox?

A. Redbox credit/debit card readers are standardized for all locations. Click this link for pictures of the two approved readers and some examples of skimmer devices: http://www.redbox.com/creditcardsecurity/


Q. Who should I call if I have questions?

If you suspect your credit card information was improperly used, contact your financial institution immediately. If you have specific concerns related to this incident and redbox, please visit http://www.redbox.com/creditcardsecurity/ or call 866-REDBOX3. Please do not reply to this email.

[DaIceMan]

maybe I've seen too many cop shows, but I always find myself looking for stuff like this. If you've used the redbox before, I think it would be easy to notice extra hardware. The fact that it covers part of the "swipe card" placard is pretty obvious to me.

[ibleet]

I use Redbox and I would notice additional hardware. But recognizing that the hardware is not from Redbox is another story. Thanks for the heads up on this!

[bubba]

Figured most of us would notice it, I'm more worried about the non-technical side of families.

[T-Shirt]

Yeah, We'd all notice cause we're geeks.
The truth is most of the time we might notice, but we've become so used to swipe cards at six zillion places that it's kind of mindless, you don't thourghly examine each one everytime.
worse I've seen parents (mostly busy mothers) give the kids a credit/debit card, and tell them to "rent a movie". Most kids would notice something different, but wouldn't (probably) know the danger/risk