As cited
Copy frozen at (site build).
breaches incidents
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group compromised a shared analytics script from Convertr, an e-commerce platform, to intercept shoppers' payment data during checkout. The attack leveraged the trust placed in third-party analytics code to exfiltrate sensitive payment information at scale.
Why it matters: E-commerce retailers using Convertr's analytics and their payment processing customers face direct exposure to card theft; practitioners should immediately audit third-party script integrity and implement content security policies to detect unauthorized payment data access.
- Source published
- First seen by Cybersecurity Tracker