Four online sporting goods websites have revealed a cyberattack that resulted in the theft of credit card details of 1,813,224 customers.
See also: Hacking group XE Group steals thousands of credit cards every day
While not much is known about the attack yet, a law firm representing the four websites said that personal information and credit card details, including the full CVV, were stolen on October 1, 2021.
The websites affected are the following:
Tackle Warehouse LLC (tacklewarehouse.com) – Fishing Gear
Running Warehouse LLC (runningwarehouse.com) – Running apparel
Tennis Warehouse LCC (tennis-warehouse.com) – Tennis clothing
Skate Warehouse LLC (skatewarehouse.com) – Skateboards and skating apparel
The websites first learned of the breach on October 15th and after an investigation, confirmed on November 29th that their customers' credit card information had been stolen.
See also: Frontier Software hack: Data breach affects thousands of Australian government employees
The details that have been compromised as a result of this incident are full name, financial account number, credit card number (with CVV), debit card number (with CVV), and website account password.
After the investigation was completed, the sporting goods websites sent notifications to affected individuals on December 16, 2021.
None of the published notifications to affected customers provide details about the nature of the incident, so the actual way the data was obtained remains unknown.
However, as the description states, it appears to be a database breach and not the implantation of skimmers on websites, although both scenarios are possible.
If you have purchased anything from these four sites, you should treat incoming communications with caution, monitor your bank account and credit card transactions, and report any suspicious transactions immediately.
See also: FTC: Americans lost $148 million to gift card fraud
Unfortunately, no identity protection service was offered to affected customers, even though the compromised data is extremely sensitive information.
