The Green Bay Packers are notifying fans of a personal and financial data breach. According to the letter sent, an attacker hacked the official online retailer in October and introduced a card skimmer script to steal personal and payment information.
The team disabled all checkout and payment featureswhen it discovered that the packersproshop.com website had been compromised.
“On October 23, 2024, we were notified of the presence of malicious code on the Pro Shop website,” explains Packers Director of Retail Operations, Chrysta Jorgensen.
See also: CISA: Treasury Department breach did not affect other federal agencies
The Green Bay Packers football team also hired outside cybersecurity experts to investigate the impact of the incident.
The investigation revealed that the malicious code inserted into the checkout page was able to steal personal information and payment information from late September to early October 2024 (September 23-24, 2024 and October 3-23, 2024). However, the Packers say the attacker was not able to steal information from payments made using a gift card, Pro Shop website account, PayPal or Amazon Pay.
“We also immediately asked the vendor hosting and managing the Pro Shop website to remove the malicious code from the checkout page, refresh passwords , and confirm that there are no remaining vulnerabilities.“.
The personal and payment data affected includes: names, addresses (billing and shipping), email addresses, as well as credit card types, numbers, expiration dates, and verification numbers.
See also: US arrests soldier for breaching AT&T and Verizon
At this time, the Green Bay Packers have not said how many customers were affected by the data breach. We also do not know how the card skimmer to the site.
The group is offering those affected free credit monitoring and identity theft for three years, through Experian.
Those who observe suspicious incidents should immediately report them to their bank and the relevant authorities.
This incident serves as a reminder of the growing threat of cyberattacks, especially in the retail industry. As more consumers turn to online shopping and sports fans (e.g. Green Bay Packers) purchase products from football team websites, cybersecurity measures must be emphasized to protect their customers’ sensitive data.
See also: Hackers steal ZAGG customers' credit cards in breach
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
To prevent such incidents in the future, organizations should regularly review security protocols and implement necessary updates. This includes conducting thorough vulnerability assessments, implementing strong encryption methods, and training employees on cybersecurity best practices.
As a customer, it is important to remain vigilant and take the necessary precautions when shopping online. This includes using secure websites with HTTPS encryption, avoiding public Wi-Fi when making transactions, and regularly monitoring financial statements for any suspicious activity.
Source: www.bleepingcomputer.com
