A Chinese cyber crime ring hacked Staples to generate millions in fraudulent gift cards as part of a massive 100 million dollar operation.
A sophisticated Chinese cyber crime ring successfully infiltrated office supply giant Staples to generate millions of dollars in fraudulent gift cards. The operation, which was part of a broader criminal enterprise exceeding 100 million dollars, utilized stolen digital assets to fund a nationwide shopping spree.
Court documents unsealed in October 2026 revealed that the hackers infiltrated the internal systems of Staples and issued more than 15,000 gift cards worth over 5 million dollars. These unauthorized funds were subsequently spent at major American retailers including Target and Sephora.
The intricate cyberattack involved exploiting the company customer support network and bypassing security protocols to hijack active employee sessions. According to information published by dexerto, federal investigators uncovered the scale of the breach through newly available legal filings.
How hackers breached the Staples customer support system
The malicious scheme dates back to October 2023, when Homeland Security Investigations received critical intelligence regarding a compromised office supply company. Investigators identified the retailer as Staples by analyzing specific details about its corporate headquarters and internal support infrastructure.
The cyber criminals found a vulnerability allowing remote access to an internal platform called Nexus. By capturing data from the system memory and hijacking active customer service sessions, the hackers generated thousands of fraudulent gift cards sent directly to controlled email accounts.
Massive retail shopping spree across multiple US states
Members of the criminal organization quickly converted the digital loot into high-value physical goods. Investigators discovered that 3,850 gift cards worth approximately 141,000 dollars were redeemed at 85 Target stores across 18 states in just two days.
Other major brands also absorbed significant financial losses from the cyberattack. Sephora reported 58,600 dollars in redeemed gift cards, while Lowe's identified approximately 226,000 dollars in fraudulent transactions, mostly involving expensive electronics.
International distribution and global cyber crime trends
The Staples breach represented only a fraction of a massive international operation. The United States Department of Justice stated that the organization acquired well over 100 million dollars through hacking, physical gift card tampering, and text scams.
Stolen electronics including Apple products, Bose headphones, and Powerbeats were transported to secure warehouses before being shipped to China and other parts of Asia. Three Chinese nationals received prison sentences ranging from 24 to 60 months in April 2025.
Frequently Asked Questions
Which company was hacked by the Chinese cyber crime ring?
Office supply giant Staples was targeted by the hackers, who infiltrated their internal customer support system to generate millions in fraudulent gift cards.
How much money was stolen in the overall criminal operation?
The broader international criminal enterprise orchestrated by the Chinese cyber crime ring involved over 100 million dollars in fraudulent gift cards and scams.
What items did the hackers purchase with the stolen gift cards?
The criminals used the fraudulent gift cards to buy expensive electronics such as Apple products, Bose headphones, and Powerbeats before shipping them to Asia.
