Gamestop.com Investigating Possible Breach
Summary: GameStop said it is investigating reports that payment card and customer data from cards used on gamestop.com was offered for sale, after being notified by a third party and engaging a security firm that day. Two financial industry sources told KrebsOnSecurity that a credit card processor alerted them gamestop.com was likely compromised between mid-September 2016 and the first week of February 2017, with the data thought to include card number, expiration date, name, address and CVV2 codes.
Key Takeaway: The suspected window runs roughly five months, and the processor's alerts - not GameStop's own monitoring - surfaced the pattern, which is why customers were not notified until the card data was already being sold.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026