https://thenextweb.com/security/2019/11/19/hackers-breached-macys-website-and-hijacked-customers-payment-info/
Anyone in Macy’s tech know anything about this?
4 replies (most recent on top)
Probably from one of the offshore contractors this wonderful company has decided to push.
It's not uncommon for websites to rely on third-party code, hosted on other sites and services, to support their own. But they present a single point of failure, which, if breached, can affect every site that the code is loaded on. This attack is called Magecart attack.
Macy's Inc. M-10.9% shares sank 10.5% in Tuesday trading after reports that the department store retailer experienced a data breach in October. According to a letter that went out to customers and was included in a ZDNet story, Macy's was alerted to a "suspicious connection" between its website and another site on Oct. 15. Macy's thinks an unauthorized computer code was entered on Oct. 7 that could capture customer information. Information that was potentially accessed includes customer name, address, and payment card number. Macy's says it has been in contact with federal law enforcement.
Yes Macys knew about it as of October 15 and it is on the Internet if you put in Macys breach and Google page it’ll come up with it