Starbucks Warns Customers to Change Their Passwords

By BEA KARNES (Patch Staff)

If you use a Starbucks app or gift card for payment and it’s linked to your credit card to automatically reload, you could be vulnerable to the latest hack attack.

But Starbucks says don’t blame the coffee chain, blame yourself for using the same password everywhere and for never changing those passwords.

Here’s how the scam works—a hacker gains access to your gift card or app by simply entering the correct password and draining the balance by transferring the money to another Starbucks gift card. When the balance hits zero, it automatically reloads because it’s attached to your credit card. The thief can then drain the balance again, repeating as many times as they choose.

NBC News tells the story of Maria Nistri who lost the $34.77 balance from her card, and then had another $100 transferred from her credit card and stolen. The whole scam took just minutes.

In an online statement, Starbucks reports that its system was not breached, but individual accounts are being accessed:

“Occasionally, Starbucks receives reports from customers of unauthorized activity on their online account. This is primarily caused when criminals obtain reused names and passwords from other sites and attempt to apply that information to Starbucks. To protect their security, customers are encouraged to use different user names and passwords for different sites, especially those that keep financial information.”

Remedy:

• Change your password
• Disable auto-reload on your card or app

Click here to view the Starbucks store locator.

Also on Patch:

• Coyote-Wolf Hybrid Confronts Hikers; Sandy Hook Principal to Receive Posthumous Degree; Black Bear on Video
• Shelton Bear Reportedly Being Taken to More Rural Location
• American Idol Winner Nick Fradiani Jr.’s Life Forever Changed
• WATCH: North Haven Grandma, 102, Blows Out Teeth Instead of Birthday Candles

(Photo by mcclanahoochie, via flickr creative commons)