UK Police Raid Chip and PIN Hacking Operation

Via ZDNet -

Criminal gangs are hacking chip and PIN terminals to steal customer card transaction and PIN details.

The discovery was made by specialist card fraud police unit, the Dedicated Cheque and Plastic Crime Unit (DCPU), when it raided a sophisticated counterfeit card factory in Birmingham. Two people have been arrested and charged with conspiracy to fraud following the raid.

When police raided the premises they found stolen chip and PIN terminals, card account numbers, a card reader/writer, computer software and fake magnetic stripe cards.

According to police, the tampered chip and PIN terminals are installed in retail outlets and petrol stations either by someone working on the inside or by threatening staff. The criminals are then able to steal card details and PIN numbers.

These are then used to create fake magnetic stripe cards containing the stolen card details, which can be used to withdraw money from cash machines or pay for goods in shops in countries that have yet to roll out chip and PIN technology.

This type of fraud increased by 77 percent last year to £207.6 million (US$387.9 million), according to figures from U.K. payment industry body Apacs.

Detective chief inspector John Folan, who heads up the DCPU, said in a statement: "These arrests are a significant development in our fight against the organized criminal gangs responsible for this type of fraud. To date, compromised chip and PIN terminals have been found in less than 30 retail outlets throughout the [United Kingdom]. Together with the banking and retail industries we are working to ensure this figure is minimized."

Jane Milne, British Retail Consortium (BRC) director of business environment, added in a statement: "Customers should be assured that U.K. retailers always take the protection of cardholder data seriously and are continuing to invest millions of pounds to enhance existing security measures. BRC members have been working closely with the police and Apacs to further their investigations and minimize any impact on customers."