The hackers have been on the provider's network since August 2023.
Slim CD, a payment processing services company, notified customers of a major data breach that compromised the personal and financial data of nearly 1.7 million people. The hackers had access to the company's system for almost a year, from August 2023 to June 2024.
Slim CD is an American provider of payment processing solutions that allow companies to access electronic and card payments through web terminals, mobile and desktop applications. The company noted that suspicious activity on its network was first detected on June 15, 2024. During the subsequent investigation, it turned out that cybercriminals had infiltrated the company's system as early as August 17, 2023.
The notice tells affected customers that during this time, hackers may have accessed various kinds of data, including customers' full names, physical addresses, credit card numbers, and expiration dates. Even though the CVV (security code) has not been compromised, there is a risk of fraudulent use of credit cards.
The company clarified that access to credit information was possible for two days - June 14 and 15, 2024. As a result, the hackers were able to view or copy credit card details, however, Slim CD assures that the lack of a CVV code reduces the likelihood of fraud.
Following the detection of the incident, Slim CD took steps to strengthen the security of its systems to prevent similar incidents from happening again in the future. The company also advised customers to remain vigilant and monitor for suspicious activity in their bank accounts, immediately report any suspicious transactions to their bank or card service provider.
Separately, it is noted that Slim CD did not offer victims free identity theft protection services, which raised questions from customers. Many of those who received the notifications may not even have known about Slim CD, as the company provides its services through businesses in the retail, hotel and restaurant sectors.
Source
Slim CD, a payment processing services company, notified customers of a major data breach that compromised the personal and financial data of nearly 1.7 million people. The hackers had access to the company's system for almost a year, from August 2023 to June 2024.
Slim CD is an American provider of payment processing solutions that allow companies to access electronic and card payments through web terminals, mobile and desktop applications. The company noted that suspicious activity on its network was first detected on June 15, 2024. During the subsequent investigation, it turned out that cybercriminals had infiltrated the company's system as early as August 17, 2023.
The notice tells affected customers that during this time, hackers may have accessed various kinds of data, including customers' full names, physical addresses, credit card numbers, and expiration dates. Even though the CVV (security code) has not been compromised, there is a risk of fraudulent use of credit cards.
The company clarified that access to credit information was possible for two days - June 14 and 15, 2024. As a result, the hackers were able to view or copy credit card details, however, Slim CD assures that the lack of a CVV code reduces the likelihood of fraud.
Following the detection of the incident, Slim CD took steps to strengthen the security of its systems to prevent similar incidents from happening again in the future. The company also advised customers to remain vigilant and monitor for suspicious activity in their bank accounts, immediately report any suspicious transactions to their bank or card service provider.
Separately, it is noted that Slim CD did not offer victims free identity theft protection services, which raised questions from customers. Many of those who received the notifications may not even have known about Slim CD, as the company provides its services through businesses in the retail, hotel and restaurant sectors.
Source
