Poshmark
August 1, 2019
•[ hack, retail ]
Poshmark, an online marketplace where North American users can buy and sell new or used clothes, shoes, and accessories, discloses a data breach: an unauthorized party gained access to its servers from where it stole personal information.
7-Eleven Japan
July 2, 2019
•[ financial, retail ]
Approximately 900 customers of 7-Eleven Japan have lost a collective of 55 million ($510,000) after hackers hijacked their 7pay app accounts and made illegal charges in their names.
Target in the hotel-entertainment industry
June 10, 2019
•[ hack, malware, retail ]
Researchers from Morphisec Labs observe a new, highly sophisticated variant of the ShellTea/PunchBuggy backdoor malware that attempted to infiltrate a number of machines within the network of a target in the hotel-entertainment industry.
Tesco Twitter Account
June 25, 2019
•[ hack, retail ]
Tesco Twitter account is apparently hacked, changes its profile to a fake Bill Gates' profile, and starts promoting Bitcoin's scams.`
Amazon
May 8, 2019
•[ financial, hack, retail ]
Amazon.com Inc. said it was hit by an "extensive" fraud, revealing that unidentified hackers were able to siphon funds from merchant accounts over six months last year.
Leicester City FC
May 31, 2019
•[ financial, hack, retail ]
Leicester City FC notifies people who used its online shop that their financial details have been stolen by hackers, including credit card numbers and CVVs. The hack occurred between 23 April and 4 May, 2019.
Bodybuilding
April 22, 2019
•[ social, phishing, retail ]
Bodybuilding.com notifies its customers of a security breach detected during February 2019 which was the direct result of a phishing email received back in July 2018. Potentially 18M users are impacted.
Puma Australia
April 29, 2019
•[ financial, malware, retail ]
Puma Australia is the latest victim of a Magecart attack.
Atlanta Hawks
April 20, 2019
•[ financial, hack, malware ]
The online shop for the Atlanta Hawks professional NBA basketball team has malicious code injected into (Magecart Infection).
Klaussner Furniture
April 5, 2019
•[ hack, retail ]
Klaussner Furniture notifies more than 9,000 employees and their dependents of a data security incident when an unauthorized third party gained access to two computers on its network in February 2019.
Kathmandu Holdings
March 14, 2019
•[ hack, retail ]
Clothing retailer Kathmandu Holdings confirms it is currently conducting an "urgent" investigation into a security incident that may have captured the personal information of customers, after an unidentified third party gained access to the website.
MyPillow
March 20, 2019
•[ hack, malware, retail ]
Researchers from RiskIQ reveal that MyPillow.com has had numerous MageCart attackers present on their site between October 2018 and November 2018.
Amerisleep
March 20, 2019
•[ financial, malware, retail ]
Also Amerisleep was affected by MageCart attacks starting in April 2017.
Topps
February 27, 2019
•[ financial, malware, retail ]
Sports trading card and collectible company Topps issues a data breach notification stating that it was affected by a Magecart attack, which possibly exposed the payment and address information of its customers.
Pharmaca
February 9, 2019
•[ financial, retail ]
Pharmaca notifies customers of payment card breach affecting several retail locations. The incident occurred between July 19, and December 12, 2018.
Truluck's Seafood, Steak & Crab House
February 13, 2019
•[ financial, malware, retail ]
Credit card information for customers dining at Truluck's Seafood, Steak & Crab House in downtown Dallas and Southlake might have been copied by malware inserted into point of sale systems at the restaurants.
Dunkin' Donuts
February 12, 2019
•[ hack, brute-force, retail ]
Dunkin' Donuts announces that it was the victim of a credential stuffing attack during which hackers gained access to customer accounts.
Huddle House
February 1, 2019
•[ financial, hack, malware ]
Fast food restaurant chain Huddle House discloses that they were affected by a data breach in the point of sale system at some locations that allowed attackers to steal payment information.
Graeter's Ice Cream
January 21, 2019
•[ hack, malware, retail ]
Graeter's Ice Cream issues notices to 12,000 customers to customers who made purchases on its website last year, after an "unauthorized code" was added to the website's checkout page.
Warby Parker
December 20, 2018
•[ hack, brute-force, retail ]
Warby Parker discloses that roughly 198,000 of its customers may have been affected by a credential stuffing attack targeting the eyeglass retail chain. The unauthorized activity started on Sept. 25 and continued through late November.
