Hackers used Staples support sessions to issue $5M in gift cards
A 2023 breach allegedly exposed Staples' Nexus support system; investigators traced about $425,000 in redeemed cards to the hack.
By Ryan Merket · Published
Primary source: 404 Media
Why it matters
The alleged use of compromised employee sessions to issue gift cards shows how access to internal support software can enable fraud. Investigators traced about $425,000 in redemptions from more than $5 million in cards issued, while prosecutors describe a much larger criminal pipeline involving hacking, fraud, U.S. retail purchases and overseas shipping.
Hackers accessed Staples' internal customer-support system and used active employee sessions to issue more than 15,000 gift cards worth over $5 million, according to a search-warrant application reported by 404 Media's Joseph Cox on October 19th, 2026. Investigators traced about $425,000 in redeemed cards to the Staples breach, far less than the value of the cards issued.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.