PHP Vulnerability Responses by Company

Staples, Inc.

Companies / web services
Aliases / services
ステープルズ / Staples / Staples, Inc.
Official website
https://www.staples.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

US store POS payments

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

POS malware may have exposed card data at some US stores in 2014, mainly August 10–September 16, with two stores starting July 20. The incident did not cover all stores.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review card statements, report suspicious charges to the bank/issuer and verify emails requesting personal information through official channels.

Official service URL

Source URLs

  1. 2014 official security noticehttps://oag.ca.gov/system/files/Staples.CA_.Consumer.Letter_1.pdfService and operation documentation
Related official sources
  1. Operator and official informationOfficial information directoryIdentifies Staples, Inc. and the relevant service scope.
  2. 2014 official security noticeOfficial notice; link to this PHP incident unconfirmedPOS malware may have exposed card data at some US stores in 2014, mainly August 10–September 16, with two stores starting July 20.

Comments