Malicious Web Code Added To Macy’s Website Leads to Critical Data Breach
PALM BEACH, FL – Right at the start of the year’s busiest shopping season, retailer Macy’s notified impacted customers (by letter) that an unauthorized third party was able to access sensitive customer payment information from the Macys.com checkout and wallet pages.
The following information may have been accessed if it was typed into the affected web-pages by a customer:
- Payment card numbers
- Payment card security codes
- Payment card expiration dates
- Full names
- Addresses
- Phone numbers
- Email addresses
The breach affected an undisclosed number of customers who entered credit card data and hit the “place order” button on the Macys.com checkout page or who accessed the wallet page through the My Account section of the website.
The unauthorized access occurred due to malicious code added on October 7 and removed by Macy’s on October 15. Customers checking out or interacting with the MyAccount wallet page on a mobile device or on macys.com mobile app were not affected. It has been reported that Macy’s has notified all impacted customers.
Macy’s is recommending customers review their credit card statements and promptly report any unauthorized activity. Customers aren’t responsible for unauthorized charges they promptly report to financial institutions.
John Colascione is Chief Executive Officer of SEARCHEN NETWORKS®, a digital marketing and technology company founded in 2001. An entrepreneur, author, and digital publisher with more than 25 years of experience, he specializes in search engine marketing, Website Monetization, domain names, and online business development. He is the author of Mastering Your Website and publishes commentary on technology, digital marketing, and the evolving Internet economy. Read more at JohnColascione.com.
Add STRATEGIC REVENUE as a Google Preferred Source to see more of our business, technology, and digital strategy coverage in Google Search.
Add Strategic RevenueYou can now select the categories you're interested in and receive email updates when new articles are published in only those categories.
