Analysts notes: Customers of the BBQ chain should monitor their banking institutions for fraudulent activity. If unusual activity is found, the activity should immediately be reported to the institution so that it can be stopped as soon as possible. Companies should perform regular security audits and network monitoring to check for breaches such as these. It is currently unknown as to how long the attackers were in the network before they started to steal cards, so continued endpoint and network monitoring may have revealed the breach before the data was stolen. One of the best ways to detect credit card data theft is to monitor unusual processes on point of sale terminals, especially those that inject into the memory of other running processes. Attackers normally set up automation scripts to manage the collection of card data from hundreds of stores, so watching for unusual scripting that communicates with a large number of remote systems using administrator credentials is another good detection strategy.

Source Article: https://www.zdnet.com/article/card-details-for-3-million-dickeys-customers-posted-on-carding-forum/