Threat actors have stolen credit cards belonging to 1,813,224 customers of four affiliated online sports gear sites.
Below are the affected websites:
- Tackle Warehouse LLC – Fishing gear
- Running Warehouse LLC – Running apparel
- Tennis Warehouse LCC – Tennis apparel
- Skate Warehouse LLC – Skateboards and skating apparel
According to the law firm representing the four websites, the security breach took place on October 1st, 2021, but the websites discovered it on October 15. The attackers had access to the personal information and credit card information of the customers, including full CVV.
On November 29, 2021, the company confirmed that the personal and financial data of its customers were stolen, including
- Full name
- Financial account number
- Credit card number (with CVV)
- Debit card number (with CVV)
- Website account password
The four websites notified the affected customers. At this time the sites have yet to disclose the cause of the security breach. Impacted users are recommended to monitor their bank account and credit card statements, and immediately report any suspicious transactions.
The bad and surprising news is that the website are not offering an identity protection service to the impacted customers.