Sign in with
Sign up | Sign in

Used ATM Machines for Sale on Craigslist

By - Source: Tom's Guide US | B 24 comments

Used ATM machines are for sale on auction sites, many of which still contain credit card numbers.

Identity theft expert Robert Siciliano is claiming that he bought a used ATM machine on Craigslist for $750. Apparently, this isn't unusual: he found plenty of machines on both Craigslist and eBay ranging between $500 and $2000 USD. However, this particular ATM machine was listed by a bar north of Boston, and contained 1000 credit card numbers.

That's right: the machine wasn't wiped. Siciliano said, in an interesting way, that his "hacker friend" came over with a manual and gutted the machine's eprom, spilling the 150-foot spread of sensitive data all over the floor. Surprised and excited, Siciliano thus called a "TV producer friend," and now his local FOX affiliate is running a series on ATM hacking and Siciliano's discovery.

Siciliano also said in his report that he was considering a scheme to use the numbers to leech millions from unsuspecting victims, however his wife told him a firm "NO!"

FOX Boston, on the other hand, added that the credit cards stored in the ATM consisted of numbers processed in a four month period. With that said, it's highly likely that many more used ATM machines for sale on eBay, Craigslist, and other auction sites contain credit card numbers, ripe for the picking. Then again, consumers are more susceptible to identity theft thanks to ATM skimming devices sold on the very same auction sites.

So how do you protect yourself from ATM hackers? "By paying attention to your statements," Siciliano said. "Don’t use just any ATM. Instead, look for ATMs in more secure locations." He also said to cover your pins when punching them into the keypad on the ATM or within retail stores.

Get more tech and gaming news by hitting me up on Twitter here.

Discuss
Display all 24 comments.
This thread is closed for comments
Top Comments
  • 21 Hide
    Anonymous , November 25, 2009 8:51 PM
    What's an "ATM machine"? An "Automated teller machine machine"? Is it a machine that makes ATMs?
  • 11 Hide
    gbismack , November 25, 2009 11:52 PM
    emoneyco99What's an "ATM machine"? An "Automated teller machine machine"? Is it a machine that makes ATMs?


    No, an ATM machine is where you go to deposit or withdraw ATMs!
Other Comments
  • 21 Hide
    Anonymous , November 25, 2009 8:51 PM
    What's an "ATM machine"? An "Automated teller machine machine"? Is it a machine that makes ATMs?
  • 0 Hide
    nforce4max , November 25, 2009 9:11 PM
    We're in the money.
  • 0 Hide
    Anonymous , November 25, 2009 10:11 PM
    Probably a stolen machine! Seriously, even older ATM's should not be exposed of in the trash!
    Anything that can contain data, should be liquidated, save the parts that are harmless..
    I can't even believe that a company is allowing such machines on the street, ready to be reverse engineered by a hacker!
  • 2 Hide
    webbwbb , November 25, 2009 10:30 PM
    I suspect the prices of used ATMs will start to go up quite a bit soon.
  • 1 Hide
    choujij , November 25, 2009 11:23 PM
    It's sad when the security in a game console is like 20x times superior than an ATM.
  • 11 Hide
    gbismack , November 25, 2009 11:52 PM
    emoneyco99What's an "ATM machine"? An "Automated teller machine machine"? Is it a machine that makes ATMs?


    No, an ATM machine is where you go to deposit or withdraw ATMs!
  • 0 Hide
    AtuBrian , November 26, 2009 12:12 AM
    ChoujijIt's sad when the security in a game console is like 20x times superior than an ATM.

    +1
  • 0 Hide
    gtvr , November 26, 2009 12:36 AM
    weird, I've never used a credit card in an ATM. I'm surprised they store CC numbers as well.

    Plus, how do you spill "150 feet" of sensitive data all over the floor? WTF?
  • 1 Hide
    False_Dmitry_II , November 26, 2009 12:56 AM
    By printing?
  • 0 Hide
    maddad , November 26, 2009 2:27 AM
    This guy has a "hacker friend" and a "tv producer friend". It's all just a little to convenient for me!
  • 0 Hide
    buwish , November 26, 2009 2:32 AM
    With a few modifications they could be a high tech solution to dispensing gumballs with the swipe of a card.
  • -1 Hide
    maigo , November 26, 2009 6:04 AM
    Who cares if there's still data on it? If hackers/crackers break them open they could find a way to make them spill out cash
  • 0 Hide
    Anonymous , November 26, 2009 6:21 PM
    I rather them make them spill out cash then steal someone's number. At least then it would be the bank's problem and not some poor unsuspecting soul..
  • 1 Hide
    bin1127 , November 26, 2009 11:09 PM
    The guy who sold it is kicking himself right about now.

    Never use an ATM at a bar or anywhere that's not a bank.
  • 0 Hide
    obsidian86 , November 27, 2009 1:07 PM
    i should get one and use it as a beer dispenser at a swipe
  • 0 Hide
    Anonymous , November 27, 2009 9:16 PM
    "Plus, how do you spill "150 feet" of sensitive data all over the floor? WTF?"

    The article ment they printed out the EPROM data onto paper and layed it out on the floor. Then they look at the data and decide what is a credit card number etc. Credit card numbers follow a certain patten so it would be rather easy to pull out the numbers.
  • 0 Hide
    quadibloc , November 27, 2009 11:39 PM
    I'm surprised that an ATM would even store a credit card number for longer than it takes to complete a transaction. Yes, there would be paper audit copies of the transaction slips, but those are picked up when they put money in, aren't they?

    Anyways, even without sensitive data, an ATM could be set up to pretend it was still online, and get people's PIN numbers, so besides removing the hard drives, they need to remove the trademarks of whoever owned it.
  • 0 Hide
    anamaniac , November 28, 2009 4:17 PM
    Wow... I feel sorry for thousands of people who are getting scammed like this.
    I know my own card was skimmed... I'm going to try to use cash only in my area (since it was a local shop, but I don't know which).

    But to be honest, I'd probably take the momey and run to Cuba myself.
  • 0 Hide
    m3kt3k , November 28, 2009 5:47 PM
    Actually to have both is not that strange. I have the same type of friends. Helps that I used to work at a tv station but they are people to (well most of them). And yes TV people also have "Normal" friends lol. As for a "Hacker friend" COMON who on this board dosent know several. I think the key was "He had the manual". LOLZ gotta love the internet.
  • 0 Hide
    safcmanfr , November 30, 2009 7:49 AM
    AnonymousI rather them make them spill out cash then steal someone's number. At least then it would be the bank's problem and not some poor unsuspecting soul..



    The ATM was sold, and no longer at the bank. so how are you supposed to make it spill out cash?? You think someone sold an ATM full of money?

    And even if it still at the bank, how do you make it spill out cash without someone noticing?

    Buying an atm online, and getting the credit card numbers would be a lot easier than trying to hack an ATM in situ and taking the money....


Display more comments
Tom’s guide in the world
  • Germany
  • France
  • Italy
  • Ireland
  • UK
Follow Tom’s guide
Subscribe to our newsletter