The restaurant-slash-arcade-slash-bar Dave & Buster's is the latest U.S. outlet to suffer a breach of its credit card processing system.
Hackers based in Ukraine and Estonia -- assisted by a guy in Miami -- installed packet sniffer malware
at the point of sale systems in several D&B outlets, which siphoned off "Track 2" data as the information was being transmitted over the company's network
from the point of sale server to a data processor's server, the U.S. Department of Justice said.
Track 2 on a card's magnetic stripe contains the credit card number and expiration date, but no personally identifiable information.
At one restaurant, the packet sniffer captured 5,000 credit and debit card numbers, which were used to make US$600,000 in fraudulent purchases.