In October 2012, the California Office of the Attorney General disclosed that Barnes & Noble Booksellers, Inc. fell victim to a cybersecurity incident involving the tampering of PIN pad devices at 63 retail stores. The attack targeted payment terminals, potentially exposing credit and debit card information of customers who made transactions at the affected locations. While the exact number of impacted individuals remains undisclosed, the breach raised concerns over unauthorized access to financial data, posing risks of fraudulent transactions and identity theft. The incident highlighted vulnerabilities in the company’s point-of-sale (POS) systems, where attackers likely installed skimming devices or malware to intercept card details during transactions. Although no immediate evidence suggested large-scale exploitation of the stolen data, the breach undermined customer trust and necessitated remediation efforts, including device replacements and enhanced security protocols. The lack of a confirmed timeline further complicated the assessment of exposure duration, leaving affected customers uncertain about the extent of potential misuse. The attack underscored the broader threat landscape for retailers, where payment system compromises remain a persistent vector for cybercriminals seeking financial gain. While Barnes & Noble took corrective actions, the incident served as a reminder of the critical need for robust endpoint security and real-time monitoring to detect and mitigate such intrusions.