As we previously stated on March 5th, our systems detected an unauthorized attempted intrusion into our Sally Beauty Supply LLC network. At the time of this discovery, we immediately engaged a top-tier forensics firm (Verizon) to investigate this security incident. As a result of this ongoing investigation, we have now discovered evidence that fewer than 25,000 records containing card-present (track 2) payment card data have been illegally accessed on our systems and we believe it may have been removed.
Track 2 sample:
;4005554444444403=1512101000000012300?
Track 2 key elements:
4005554444444403 - Cardholder's PAN (Primary Account Number)
1512 - Card's expiration date (December 2015)
123 - CVV (Card Verification Value)