Macy's data breach sees customer payment details stolen

Macy's has revealed its website suffered a security breach for a week in October exposing the personal information of customers including their payment details.

As Bleeping Computer reports, the data breach occurred on macys.com and is known as a Magecart attack. Hackers managed to insert malicious code into Checkout and My Wallet pages of the department store's website, which then proceeded to collect the personal information of customers who used the site.

The malicious code was present on the website from Oct. 7 until Oct. 15, meaning if you shopped there between those dates your personal details were likely stolen. The information collected by an unauthorized third party include first name, last name, address, city, state, zip, phone number, email address, payment card number, security code, and month/year of expiration. In other words, they got everything. Read more...