On 13th May we have seen a robotic fraud including chip read authorizations at merchant:
DISTRIB BRAS CUBAS
city MOGI DAS CRUZ
Authorizations were performed during 9 minutes, using 11 cards with valid PANs but incorrect expiry date 05/16 and 01/17.
All PANs had the same BIN, first 12 digits were the same, only the last 4 digits were changed.
All PANs have been already historically blocked, the reason for auth decline was pick-up or incorrect expiry.
The „initial“ PAN from which the other card numbers were derived was used chip/chip in Brasil at CPP MOVIDA LOCACAO DE, MID 010306034530001, TID 77805242 in 03/2014.
Other PANs have never been used in Brasil, one of the cards has never been given to the cardholder.
The auth detail, terminal verification result, contains the value STATIC DATA AUTHENTICATION FAILED.