- Wacom has begun to notify customers of a security incident
- Threat actors managed to steal payment information from a non -public number of people
- The attack has been treated, Wacom says
Design hardware company Wacom has warned its customers that it may have lost their personal data, including payment information.
A report from Registered Says the company believes that the attack took place between November 28, 2024 and January 8, 2025, and it is currently announcing affected persons.
In the E -Mail message letter, Wacom notes, “The question that contributed to the incident has been processed and examined effectively. However, we are now only writing to customers who may have been potentially affected by this.”
A credit card skimmer?
Those who do not get an official Wacom communication should be considered safe for now. Those who get the E email should definitely start monitoring their credit card statements and possibly even considering placing a fraud warning on their credit card.
Wacom did not detail the attack at this time. Therefore, we do not know who the striker is, how they managed to infiltrate the company’s webshop or how many people are affected.
While you are still within the domain of speculation, Registered believes that a credit card skimmer code may have been involved, especially since Wacom’s webshop is run by Magento.
Magento is a wildly popular open source e-commerce platform and as such is a frequent target. For example, at the end of July 2024, researchers reported on a creative technique involving so-called swap files used to implement sustained credit card mimsters on Magento sites. Earlier, in April, CyberSecurity scientists found a critical vulnerability in Magento that allowed threat actors to insert persistent back doors on vulnerable servers.
If you are interested in learning more, make sure you read our definitive magento hosting guide.
Via Registered
