{
  "id": 15883284,
  "title": "Staples hackers created more than 15,000 gift cards, then went on a shopping spree",
  "url": "https://urgent.news/2026/10/21/staples-hackers-created-more-than-15-000-gift-cards-then-went-on-a",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-21T12:03:00.000Z",
  "source": {
    "name": "TechSpot",
    "slug": "techspot",
    "url": "https://www.techspot.com/news/114279-hackers-stole-over-5-million-staples-gift-cards.html"
  },
  "original_language": "en",
  "account": "Hackers gained unauthorized access to Staples' customer-service system and created more than 15,000 gift cards, valued at over $5 million, according to a newly unsealed search warrant application. The breach connected a corporate software intrusion to an organized retail theft operation, enabling the group to convert unauthorized system access into merchandise. The attackers obtained session data from the memory of the retailer's support application, which they believed was only accessible from their own computers. Chinese organized crime members exploited this vulnerability to generate gift cards for retailers like Target and Sephora. They then used the cards to purchase electronics and other merchandise, much of which was shipped to China. The compromised system, known as Nexus, is an internal customer-support application used by Staples. The hackers reached Nexus from outside the company's network, making multiple heap-dump requests to capture the application's memory and hijack customer-service representative sessions. Using these authenticated sessions, they issued gift cards and sent them to controlled email addresses. The operation was part of a larger gift card conspiracy involving warehouses and shipping goods to China. The Justice Department sentenced three Chinese nationals involved in the scheme, but did not specifically name Staples. The broader group amassed over $100 million in gift cards across various retailers.",
  "summary": "The attackers obtained the session data from the memory of a support application the retailer believed could only be reached from its own computers. The breach gave a Chinese organized crime group a way to generate gift cards for retailers including Target and Sephora. Members of the operation then used... Read Entire Article",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Tom's Hardware",
        "title": "Chinese crime ring steals more than $5 million in gift cards from Staples customer service",
        "url": "https://urgent.news/2026/10/20/chinese-crime-ring-steals-more-than-5-million-in-gift-cards-from",
        "published": "2026-10-20T10:50:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}