Attack on payment gateway provider affects 1.7 million people

[✨ Megiddo]

Payment services provider Slim CD has reported a hacker attack and data leak that compromised the bank cards and personal data of almost 1.7 million people.

Slim CD is an American provider of payment processing solutions that allow companies to access electronic and card payments through web terminals, mobile and desktop applications.

In a notification sent to affected customers this week (there are about 1.7 million victims), the company said that hackers retained access to its network for almost a year, from August 2023 to June 2024. Suspicious activity was first noticed on June 15 of this year, but an investigation revealed that hackers gained access to Slim CD's network as early as August 17, 2023.

At the same time, company representatives said that the attackers gained access to bank card data and viewed information about them only for two days, between June 14 and 15, 2024.

As a result, the following data could have fallen into the hands of hackers:

• full user name;
• physical address;
• bank card number;
• card expiration date.

Although the leaked data does not include CVV codes, the possibility of fraud is still high. The company recommends that users remain vigilant and, if they detect signs of fraud or identity theft attempts, report these actions to the card issuer as soon as possible.

Slim CD assures that it has taken security measures to prevent similar incidents in the future, but does not specify which ones. Federal law enforcement and regulatory agencies have also already been notified of the incident.