Visa Jordan, Carrefour, JCPenney and JetBlue Airways. Between 27 November 2013 and 15 December 2013, a breach of systems at Target Corporation exposed data from about 40 million credit cards. The information stolen included names, account numbers, expiry dates, and card security codes. From 16 July to 30 October 2013, a hacking attack compromised about a million sets of payment card data stored on computers at Neiman-Marcus. A malware system, designed to hook into cash registers and monitor the credit card authorisation process (RAM-scraping malware), infiltrated Target's systems and exposed information from as many as 110 million customers. On 8 September 2014, The Home Depot confirmed that their payment systems were compromised. They later released a statement saying that the hackers obtained a total of 56 million credit card numbers as a result of the breach. On 15 May 2016, in a coordinated attack, a group of around 100 individuals used the data of 1600 South African credit cards to steal US$12.7 million from 1400 convenience stores in Tokyo within three hours. By acting on a Sunday and in another country than the bank which issued the cards, they are believed to have won enough time to leave Japan before the heist was discovered. Countermeasures to combat card payment fraud Countermeasures to combat credit card fraud include the following. By Merchants PAN truncation – not displaying the full primary account number on receipts Tokenization (data security) – using a reference (token) to the card number rather than the real card number Requesting additional information, such as a PIN, ZIP code, or Card Security Code Performing geolocation validation, such as IP address Use of Reliance Authentication, indirectly via PayPal, or directly via iSignthis or miiCard. By Card issuers Fraud detection and prevention software that analyzes patterns of normal and unusual behavior as well as individual transactions in order to flag likely fraud. Profiles include such information as IP address. Technologies have existed since the early 1990s to detect potential fraud. One early market entrant was Falcon; other leading software solutions for card fraud include Actimize, SAS, BAE Systems Detica, and IBM. Fraud detection and response business processes such as: Contacting the cardholder to request verification Placing preventative controls/holds on accounts that may have been victimized Blocking card until transactions are verified by the cardholder Investigating fraudulent activity Strong Authentication measures such as: Multi-factor Authentication, verifying that the account is being accessed