conv.

← The whole story
Security
AI agent harnesses breach 27+ online retailers, steal 600,000+ card records

Gambit Security publishes interim report on the campaign

1 Sep 22 6:00 PM · 1d ago · 2 posts · 2 sources · development 1 of 2

Gambit Security says it recovered the operator's staging server and reconstructed the campaign, disclosing over 600,000 stolen unexpired card records from two companies, skimmers on five retailer sites, and access to a Fortune 500 hospitality company, a major US airline, an industrial supplies distributor and a fashion retailer.

Gambit Security publishes interim report on the campaign
gambit.security

“This campaign showcases just how powerful attacks can be in 2026.”

Gambit Security

Gambit Security Threat intelligence firm that authored the reportUnnamed threat actor Operator of the AI-driven attack campaignShadowserver Foundation Industry partnerDaniel Gordon Industry partner cited in the report

The whole story posts the bright band is this development · numbered dots are the others · click one to jump

Peak 1 piece in one half hour at Sep 22, 5 PM; 3 pieces over 33 hours (3 posts) Sep 22, 5:00 PM — 1 piece · 1 post — Mastodon 1Sep 22, 5:30 PM — 1 piece · 1 post — Hacker News 1Sep 22, 6:00 PM — quietSep 22, 6:30 PM — quietSep 22, 7:00 PM — quietSep 22, 7:30 PM — quietSep 22, 8:00 PM — quietSep 22, 8:30 PM — quietSep 22, 9:00 PM — quietSep 22, 9:30 PM — quietSep 22, 10:00 PM — quietSep 22, 10:30 PM — quietSep 22, 11:00 PM — quietSep 22, 11:30 PM — quietYesterday, 12:00 AM — quietYesterday, 12:30 AM — quietYesterday, 1:00 AM — quietYesterday, 1:30 AM — quietYesterday, 2:00 AM — quietYesterday, 2:30 AM — quietYesterday, 3:00 AM — quietYesterday, 3:30 AM — quietYesterday, 4:00 AM — 1 piece · 1 post — Mastodon 1Yesterday, 4:30 AM — quietYesterday, 5:00 AM — quietYesterday, 5:30 AM — quietYesterday, 6:00 AM — quietYesterday, 6:30 AM — quietYesterday, 7:00 AM — quietYesterday, 7:30 AM — quietYesterday, 8:00 AM — quietYesterday, 8:30 AM — quietYesterday, 9:00 AM — quietYesterday, 9:30 AM — quietYesterday, 10:00 AM — quietYesterday, 10:30 AM — quietYesterday, 11:00 AM — quietYesterday, 11:30 AM — quietYesterday, 12:00 PM — quietYesterday, 12:30 PM — quietYesterday, 1:00 PM — quietYesterday, 1:30 PM — quietYesterday, 2:00 PM — quietYesterday, 2:30 PM — quietYesterday, 3:00 PM — quietYesterday, 3:30 PM — quietYesterday, 4:00 PM — quietYesterday, 4:30 PM — quietYesterday, 5:00 PM — quietYesterday, 5:30 PM — quietYesterday, 6:00 PM — quietYesterday, 6:30 PM — quietYesterday, 7:00 PM — quietYesterday, 7:30 PM — quietYesterday, 8:00 PM — quietYesterday, 8:30 PM — quietYesterday, 9:00 PM — quietYesterday, 9:30 PM — quietYesterday, 10:00 PM — quietYesterday, 10:30 PM — quietYesterday, 11:00 PM — quietYesterday, 11:30 PM — quietToday, 12:00 AM — quietToday, 12:30 AM — quietToday, 1:00 AM — quietToday, 1:30 AM — quiet 12
1Gambit Security publishes interim report…2Security community amplifies the findings
yesterday8 AM4 PMnow · 2:00 AM ET

What people said 1 voice · verbatim

All 2 developments of AI agent harnesses breach 27+ online retailers, steal… →

MastodonHacker News