Starbucks Warns Customers to Change Their Passwords

By Bea Karnes

If you use a Starbucks app or gift card for payment and it’s linked to your credit card to automatically reload, you could be vulnerable to the latest hack attack.

But Starbucks says don’t blame the coffee chain, blame yourself for using the same password everywhere and for never changing those passwords.

Here’s how the scam works—a hacker gains access to your gift card or app by simply entering the correct password and draining the balance by transferring the money to another Starbucks gift card. When the balance hits zero, it automatically reloads because it’s attached to your credit card. The thief can then drain the balance again, repeating as many times as they choose.

NBC News tells the story of Maria Nistri who lost the $34.77 balance from her card, and then had another $100 transferred from her credit card and stolen. The whole scam took just minutes.

In an online statement, Starbucks reports that its system was not breached, but individual accounts are being accessed, “Occasionally, Starbucks receives reports from customers of unauthorized activity on their online account. This is primarily caused when criminals obtain reused names and passwords from other sites and attempt to apply that information to Starbucks. To protect their security, customers are encouraged to use different user names and passwords for different sites, especially those that keep financial information.”

Remedy:

• Change your password
• Disable auto-reload on your card or app