In response to the Tripwire alert, Fugate said, the companyвЂ™s information technology department вЂњshut down all external communicationsвЂќ and began an investigation. Unlike other products that try to detect intrusions based on odd or anomalous network traffic, Tripwire fires off alerts if it detects that certain key system files have been modified. Pokeswoman Karen Fugate said the company recently detected an intrusion into its network, but that neither the companyвЂ™s information technology experts nor an outside forensics firm could find evidence that customer card data had been stolen from the companyвЂ™s systems.ДЇugate said Sally Beauty uses an intrusion detection product called Tripwire, and that a couple of weeks ago - around Feb. Krebs then asked Sally Beauty about the breach, and reported this: Three different banks contacted by Krebs investigated how some of their own customers' account numbers wound up among the offerings, by searching for what's known as a вЂњcommon point of purchase,вЂќ or CPP, and discovered that within the previous ten days, all of the tested cards had been used for a Sally Beauty purchase.

KrebsOnSecurity discovered on March 5 that three days earlier, 282,000 stolen credit and debit card numbers became available for sale in what Krebs called 'a popular underground crime store.' This time the victim is the Sally Beauty supply company and its shoppers. Another day, another hacker breaking into a corporate database and stealing customers' credit card information.

Underground credit card hacking sites