Bob Shop Says Hackers Copied Encrypted Card Data and Key

In Short

Bob Shop customers have been told to treat their card details as exposed after a breach of Bob Group systems.

What Happened

Bob Group notified Bob Shop customers that an unauthorised party accessed its systems on October 30 to 31.

Bob Group said the access included a database containing customer and seller accounts, plus older partial payment records.

Reports said encrypted card numbers were copied, along with the key needed to decrypt them. If an attacker has both encrypted data and the decryption key, the encryption no longer protects the data.

Bob Group said it closed the identified access routes and replaced the key.

Why It Matters

The combination of encrypted card numbers and the key to open up them raises the risk of card data misuse. Bob Group’s message that card details should be treated as exposed signals that customers may need to take extra precautions.

The incident also highlights a key operational issue for companies handling payment data, protecting not just the stored card information but also the cryptographic keys that secure it.