OXO Discloses MageCart Attack That Targeted Customer Data on Oxo.com

guest · Jan 7, 2019

OXO Discloses MageCart Attack That Targeted Customer Data on Oxo.com
January 7, 2019
https://www.bleepingcomputer.com/ne...attack-that-targeted-customer-data-on-oxocom/

United States based kitchen utensil manufacturer OXO International disclosed a data breach that spans numerous periods over two years. This breach notification states that customer and payment information may have been exposed and further research by BleepingComputer indicates this was most likely a MageCart attack.

"On December 17, 2018, OXO confirmed through our forensic investigators that the security of certain personal information that you entered into our e-commerce website (https://www.oxo.com) may have been compromised," states the breach disclosure.
Other indications of compromise
[...] the source code shows a script for the Russian https://top.mail.ru/ web site tracking service having been added to the checkout page.
While this may have been legitimate, it would be strange for U.S. based company to be utilizing a Russian analytics service rather than a well known one like Google Analytics.
Click to expand...

Breach disclosure (PDF): https://oag.ca.gov/system/files/OXO%20International%202%20Ad%20r2fin_0.pdf

Minimalist · Jan 14, 2019

Data Exposed in OXO, Amazon and MongoDB Leaks

2019 has so far been making good on security experts’ predictions that there will be no ebb in data exposures for the new year: In the first half of January, several data breaches and leaks have already come to light, including three notable incidents at well-known firms in just the past week.

Over the course of the last few days, OXO and Amazon India disclosed that customers’ personal data had been compromised in separate incidents. Also making headlines last week was a massive data leak stemming from a vulnerable MongoDB that left millions of resumes open for the taking on the internet.
Click to expand...

https://threatpost.com/data-exposed-oxo-amazon-mongodb/

Log in or Sign up

OXO Discloses MageCart Attack That Targeted Customer Data on Oxo.com

guest Guest

Minimalist Registered Member

Log in or Sign up

OXO Discloses MageCart Attack That Targeted Customer Data on Oxo.com

guest Guest

Minimalist Registered Member

Useful Searches