The Green Bay Packers announced this week that hackers stole the credit card data of over 8,500 customers of the team's Pro Shop online retail store.
According to the Green Bay Press Gazette, the breach happened back in September and October of last year and affected limited number of people who made credit card transactions during the period. Payments made using gift cards, Pro Shop website accounts, PayPal, or Amazon Pay were not affected, the team said.
The Green Bay Packers announced this week that hackers stole the credit card data of over 8,500 customers of the team's Pro Shop online retail store.Â
According to the Green Bay Press Gazette, the breach happened back in September and October of last year and affected limited number of people who made credit card transactions during the period. Payments made using gift cards, Pro Shop website accounts, PayPal, or Amazon Pay were not affected, the team said.
“The incident was limited to the single e-commerce website and did not affect any other Packers information technology or data. We are working closely with our vendors and third-party experts to ensure our sites are as secure as possible for our fans," the Packers said in a written statement.
“Maintaining the privacy and security of our fans’ personal information is of utmost importance to the Green Bay Packers. The Packers Pro Shop’s website, managed and hosted for us by a third-party vendor, had a malicious code inserted by hackers. Immediately after being alerted to the malicious code, we began an investigation with the assistance of outside experts and the malicious code was removed the same day," the Packers said in the statement.
The Packers said that hackers might have had access to information on Sept. 23-24 and Oct. 3-23. Information exposed might have included the customer's address (billing and shipping), email address, credit card type, credit card number, credit card expiration date, and credit card verification number.
“We are continuing to work closely with our vendors to ensure they continue to strengthen their security controls to prevent future incidents. The incident affected only a limited number of individuals who conducted credit card transactions on the website during a short time period. All potentially affected individuals have been sent a notification letter with additional information on the incident and includes three years of complementary credit monitoring and identity theft protection," the team statement said.
