Gambit says an AI-assisted attacker stole 600,000 cards for about $25 per target
Gambit says a human-directed campaign active since July stole more than 600,000 card records and placed skimmers on at least 119 sites.
By RuntimeWire Staff · Published · Updated
Primary source: BleepingComputer
Why it matters
The incident puts Gambit's recovery thesis against a documented attack in which agents both stole payment data and damaged database records. It also shows why security teams must measure how quickly critical systems can be restored, not only whether they have backups.
Gambit Security says a financially motivated attacker used three AI agent tools to break into online retailers, steal more than 600,000 valid card details and plant payment skimmers on at least 119 websites. The campaign was active from July through at least September 22nd, and Gambit estimates the attacker spent $12,000 to $18,000 on AI services and related operations.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.