Thieves are accessing consumers' credit and debit card information by stealing point-of-sale terminals used to pay for purchases and extracting the data that many merchants fail to delete from the devices' hard drives.