"This went on for four months, " says Bryan Sartin, a New York-based cybersleuth called in on the case by a big U.S. bank that processed transactions for the unnamed retailer (both companies decline to let Sartin identify them).

FORBES: Criminal Outbreak