--- title: "Barnes & Noble Card-Skimming Incident: What You Can Learn" id: "14009" type: "post" slug: "barnes-noble-card-skimming-incident-what-you-can-learn" published_at: "2012-10-24T21:17:08+00:00" modified_at: "2026-11-09T19:20:13+00:00" url: "https://associationsnow.com/2012/10/24/barnes-noble-card-skimming-incident-what-you-can-learn/" markdown_url: "https://associationsnow.com/2012/10/24/barnes-noble-card-skimming-incident-what-you-can-learn.md" excerpt: "While high-profile, it’s far from the first incident of its kind. Here’s how you can prevent such incidents." taxonomy_category: - "Operations" taxonomy_post_tag: - "AssociationsNow" - "Business" - "credit card" - "Data Breach" - "Point-of-Sale" taxonomy_content_format: - "Article" taxonomy_role: - "Association CEO / Executive Director" - "C-Level" - "Executive Team" - "VP" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Barnes & Noble Card-Skimming Incident: What You Can Learn A favorite bookseller recently became someone’s favorite target. Barnes & Noble reported Tuesday night that dozens of its credit-card-scanning machines — 63 in nine states — had been tampered with, making vulnerable the information of anyone who used the affected PIN pads. Among the major cities targeted were New York, Chicago, Miami, and San Diego. [Security Week has a full list (opens in a new tab)](http://www.securityweek.com/more-60-barnes-noble-stores-suffer-credit-card-breach-compromised-keypads) . The incident was discovered over a month ago, but was only disclosed Tuesday. “We have acted at the direction of the U.S. government and they have specifically told us not to disclose it, and there we have complied,” an official from the company [told The New York Times (opens in a new tab)](http://www.nytimes.com/2012/10/24/business/hackers-get-credit-data-at-barnes-noble.html) . While this is perhaps the most high-profile skimming incident of its kind — in part because of the widespread, distributed nature of the attack — it’s far from the first one. Last year, for example, the craft store chain Michaels [suffered a similar incident (opens in a new tab)](http://krebsonsecurity.com/2011/05/breach-at-michaels-stores-extends-nationwide/) . And California’s [Lucky supermarket chain (opens in a new tab)](http://savemart.com/lucky-supermarkets-confirms-tampered-credit-debit-card-readers-resulted-in-compromised-account-information) also faced a similar attack. Associations aren’t retailers, but they usually sell things. So what can you do to protect your organization and its customers? The PCI Security Standards Council has a set of guidelines available for retailers who may be affected by such issues, along with [a sheet of best practices (opens in a new tab)](https://www.pcisecuritystandards.org/documents/skimming_prevention_overview_one_sheet.pdf) for detecting card skimming. “It is very important to fully understand the security implications of your terminal environment,” [the guidelines state (opens in a new tab)](https://www.pcisecuritystandards.org/documents/skimming_prevention_IS.pdf) . “Where you choose to locate your terminal(s) – and everything that surrounds the terminal – has an impact on how easy it is for a criminal to compromise that terminal.” Could this happen to your association when you transact business by credit card? What sort of security measures could be taken, at events for example, to prevent point-of-sale fraud? (TMG archive photo) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#Business](https://associationsnow.com/tag/business/) [#credit card](https://associationsnow.com/tag/credit-card/) [#Data Breach](https://associationsnow.com/tag/data-breach/) [#Point-of-Sale](https://associationsnow.com/tag/point-of-sale/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastAssociations NOW Presents: Industry Partner Edition-Helping Associations Thrive in the Age of AIJuly 16, 2026](https://associationsnow.com/2026/07/16/associations-now-presents-industry-partner-edition-helping-associations-thrive-in-the-age-of-ai/) - [VideoSkip the Search. Start Here.June 25, 2026](https://associationsnow.com/2026/06/25/skip-the-search-start-here/) - [VideoRisky Business: What Types of Insurance Do Associations Really Need?June 17, 2026](https://associationsnow.com/2026/06/17/risky-business-what-types-of-insurance-do-associations-really-need/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2012%2F10%2F24%2Fbarnes-noble-card-skimming-incident-what-you-can-learn%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !