Full Breakdown
Chinese Crime Ring Hacks Staples to Flood U.S. Retailers with Fraudulent Gift Cards
By Drooid · · How we work
Hack of Staples Enables Massive Gift-Card Fraud
In October 2023, Homeland Security Investigations (HSI) was alerted that a Chinese organized-crime group had breached the internal systems of Staples, a Massachusetts-based office-supply retailer. The hackers exploited a memory-dump technique to capture credentials for the company’s customer-service platform, Nexus, and then hijacked the sessions of Staples representatives to issue more than 15,000 gift cards valued at over $5 million. The cards were sent to email accounts controlled by the gang, which later redeemed them at a range of U.S. retailers.
Scope of the Fraudulent Purchases
Target investigators reported that the gang used 3,850 of the stolen cards—worth roughly $141,000—across 85 stores in 18 states during a two-day period, completing about 300 transactions. Sephora disclosed that around 330 cards, valued at $58,600, were redeemed online in roughly 1,500 transactions. Lowe’s identified 450 cards totaling $226,000 that were used both in-store and online at more than 22 locations. In total, the group successfully employed 4,630 hacked cards, amounting to approximately $425,000 in merchandise, which included high-value electronics such as Apple, Bose, and Powerbeats products.
Law-Enforcement Response and Prior Prosecutions
The investigation ties the Staples breach to a broader retail-theft conspiracy previously disclosed by the Department of Justice. In April 2023, the DOJ announced the sentencing of three Chinese nationals for their participation in the same gift-card fraud scheme. A subsequent press release from the IRS Criminal Investigation (IRS-CI) unit stated that the overall operation had generated more than $100 million in illicit gift-card value, underscoring the scale of the transnational network.
Impact and Broader Implications
The case illustrates how sophisticated cyber intrusions can enable large-scale physical theft, with entire warehouses reportedly used to store the stolen merchandise before shipment to China. Federal agencies emphasized continued collaboration with international partners to disrupt similar schemes and protect U.S. businesses and consumers from organized-crime exploitation of digital payment systems.
