Source link : https://tech365.info/freshclicks-breach-triggers-zagg-buyer-safety-alert/
Zagg’s buyer data has been compromised by way of a third-party hack.
Shopper electronics and iPhone accent maker Zagg is letting prospects know that bank card transactions between October 26 and November 7, 2024 could have been compromised attributable to a hack of a third-party fee processor.
Zagg, based mostly in Utah, makes merchandise reminiscent of keyboards, cellphone instances, display screen protectors, energy banks, and different equipment. It makes use of BigCommerce to course of bank card transactions on its web site, which additionally gives an app known as FreshClicks for creating commerce-friendly web sites.
It was found that an attacker was in a position to breach the FreshClicks app, injecting malicious code that stole prospects’ card particulars, reviews BeepingComputer.
Letters despatched to Zagg prospects defined that an “unknown actor” had injected malicious code into the FreshClick app, designed to scrape bank card information entered as a part of the Zagg checkout course of. This happened between October 26 and November 7.
The breach was reported to regulators and federal authorities. Whereas the variety of affected prospects is unreported, the attackers managed to steal names, addresses, and fee card information of consumers.
Affected prospects had been advised by way of the letter to observe their monetary account exercise, together with including fraud alerts and a credit score freeze. Prospects of Zagg who might need had their card particulars compromised can have their card exercise monitored for 12 months by way of Experian at no cost. .
In an announcement, Large Commerce insisted its personal techniques weren’t breached or compromised. Nonetheless, as soon as the issue was found, BigCommerce disabled and uninstalled FreshClicks from its purchasers’ shops, which eliminated compromised APIs and malicious code.
—-
Author : tech365
Publish date : 2024-12-28 19:52:23
Copyright for syndicated content belongs to the linked Source.