Avery Products Corporation is warning of a customer data breach. It all started with a website breach that allowed customers' credit card and personal information to be stolen.
The US company sent a data breach notification to affected customers. It states that the attack was discovered on December 9, 2024. After an internal investigation, it was determined that the attackers had placed a card skimmer on avery.com, the company's online shop domain, on July 18, 2024.
As a result, personal customer information and payment details entered on the Avery website from July 18, 2024 to December 9, 2024, were stolen by the attackers.
See also: OneBlood: Ransomware attack led to data breach
“On December 9, 2024, Avery was notified of a ransomware associated with certain systems,” the statement said. “Avery immediately initiated an investigation, with the assistance of cybersecurity experts, to determine the nature and scope of the activity. Our investigation determined that an unauthorized user introduced malware that was used to “steal” credit card used on our website, avery.com, between July 18, 2024, and December 9, 2024.”
Avery: Data Breach
The data that has been exposed includes:
- First and last name
- Billing and shipping address
- Email address
- Phone number
- Payment card number, CVV code and expiration date
- Purchase amount
Social Security numbers, driver's license numbers, ID numbers, and dates of birth have not been affected.
See also: Telefónica: Data breach affects thousands of employees and customers
However, the exposed information is enough to carry out fraudulent transactions and unauthorized purchases on behalf of the victims.
“We do not know if the fraudulent charges are related to our website incident, but it seems likely that payment card (and other) information was obtained, as we received two emails from customers stating that they discovered a fraudulent charge and phishing attempts were made against them,” Avery’s data breach notification continued.
According to the filing with the Maine Attorney General, the incident affected 61,193 Avery customers.
Affected customers will receive 12 months of free credit monitoring service through Cyberscout.
Recipients of the notifications should also be cautious of potential phishing emails and check for suspicious activity in their accounts.
See also: Medusind: Data breach affects 360,000 people
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
A dedicated helpline has also been set up to answer questions Avery customers may have about the data breach.
Steps to protect yourself from data breaches
- Be vigilant: Be on the lookout for suspicious activity on your accounts. If you notice any unauthorized charges or transactions, report them immediately.
- Use strong passwords: Make sure you use unique and strong passwords for all online accounts , including your banking and shopping websites.
- Enable two-factor authentication: Consider enabling two-factor authentication for extra security when accessing sensitive information online.
- Beware of phishing attempts: Be wary of emails or messages that ask for personal information or direct you to click on links. These may be phishing attempts from hackers trying to steal your data.
- Monitor your credit report: Regularly check your credit report for any unusual activity that may indicate identity theft.
- Keep software up to date: Make sure to regularly update your operating system and software to fix potential security vulnerabilities and protect against cyber attacks.
- Use secure websites: When shopping online, look for websites with HTTPS in the URL (secure connection).
- Educate yourself: Stay informed about data breaches and other cyber threats by following trusted sources and educating yourself on best practices for keeping your personal information safe online.
- Act quickly: If you believe you have been the victim of a data breach, act quickly to minimize any potential damage. Contact your bank or credit card company, change your passwords , and monitor your accounts closely. The sooner you take action, the better chance you have of minimizing the impact of the breach on your personal information. Appropriate steps should be taken immediately to prevent any further data loss or financial damage.
Source: www.bleepingcomputer.com
