More on a breach first reported here yesterday:
Investigators believe the scammers used either a skimming device or a computer hack to steal credit and debit card information from victims that had used their cards at the Onondaga County Civic Center. Police have now heard from more than 60 victims.
So far, Syracuse Police say most of the victims have reported using their credit or debit card in the basement at the cafeteria of the Civic Center.
[…]
While police aren’t sure which method the scammers used to get the card information, they say it appears they’ve had the information for about eight to ten months and only recently started using it.
Although investigators believe it’s been narrowed down to the Civic Center, they want anyone who has used a card at the Oncenter or War Memorial to also check their statements.
Read more on WSYR.
The Post-Standard also covers the breach.
Note that the thieves reportedly did not use the data immediately, reminding us once again why statements such as “We have no evidence of misuse…” issued within days after a breach are misleading and dangerously reassuring.