Sally Beauty Admits Initial Estimate of Compromised Accounts Low

March 31, 2014

Sally Beauty Admits Initial Estimate of Compromised Accounts Low Denton, Texas-based Sally Beauty, which had held to its original estimate of 25,000 card accounts affected in a recent security breach despite reports suggesting the true extent was much larger, on Friday admitted it probably was. Veteran security reporter Brian Krebs said last week data from an underground Website selling the purloined information indicated stolen accounts came from ZIP codes representing every Sally Beauty location.

On Friday, the chain of beauty-products stores said an ongoing investigation uncovered evidence that more than the 25,000 credit- and debit-card accounts the company initially said were compromised may have been affected. Sally Beauty said it would not provide a new estimate until the forensic review is complete.