{"id":97113,"date":"2019-10-17T16:46:24","date_gmt":"2019-10-17T23:46:24","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=97113"},"modified":"2025-08-12T19:27:38","modified_gmt":"2025-08-13T02:27:38","slug":"briansclub-hack","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/briansclub-hack\/","title":{"rendered":"Hack-ception: Benign Hacker Rescues 26M Stolen Credit Card Records"},"content":{"rendered":"

There’s something ironic about cybercriminals getting “hacked back.” BriansClub, one of the largest underground stores for buying stolen credit card data, has itself been hacked. According to researcher Brian Krebs<\/a>, the data stolen from BriansClub encompasses more than 26 million credit and debit card records taken from hacked online and brick-and-mortar retailers over the past four years, including almost eight million records uploaded to the shop in 2019 alone.<\/p>\n

Most of the records offered up for sale on BriansClub are \u201cdumps.\u201d Dumps are strings of ones and zeros that can be used by cybercriminals to purchase valuables like electronics, gift cards, and more once the digits have been encoded onto anything with a magnetic stripe the size of a credit card. According to Krebs on Security<\/a>, between 2015 and 2019, BriansClub sold approximately 9.1 million stolen credit cards, resulting in $126 million in sales.<\/p>\n

\"\"<\/p>\n

Back in September, Krebs was contacted by a source who shared a plain text file with what they claimed to be the full database of cards for sale through BriansClub. The database was reviewed by multiple people who confirmed that the same credit card records could also be found in a simplified form by searching the BriansClub website with a valid account.<\/p>\n

So, what happens when a cybercriminal, or a well-intentioned hacker in this case, wants control over these credit card records? When these online fraud marketplaces sell a stolen credit card record, that record is completely removed from the inventory of items for sale. So, when BriansClub lost its 26 million card records to a benign hacker, they also lost an opportunity to make $500 per card sold.<\/p>\n

Protect Your Data<\/h2>\n

What good comes from “hacking back” instances like this? Besides the stolen records being taken off the internet for other cybercriminals to exploit, the data stolen from BriansClub was shared with multiple sources who work closely with financial institutions. These institutions help identify and monitor or reissue cards that show up for sale in the cybercrime underground. And while \u201chacking back\u201d helps cut off potential credit card fraud, what are some steps users can take to protect their information from being stolen in the first place? Follow these security tips to help protect your financial and personal data:<\/p>\n