Browse
Category
DiscussionsGeneral

PSA: GameStop database compromised (Update)

Closed
doctorofjournalism

http://www.polygon.com/2017/4/8/15229498/gamestop-hacker-breach-credit-card-information-cvv2

Significantly, Krebs' sources said that card verification value numbers — CVV2 numbers, the three-digit verification code on the back of a physical credit card — were among the data siphoned from GameStop.com. Other information compromised in the breach includes credit card numbers, expiration dates, names and addresses of the card holders.

The important part is the verification codes, as this data isn't even supposed to be stored by retailers. If you have shopped at GameStop.com or in store in the past few months, be advised.

Update via Jaxed, June 15:

Update: If you made a purchase with a credit card from their online store Gamestop.com (no breach in the physical stores...yet) between August 2016 and February 2017 you may have been compromised.

9 years ago*

Comment has been collapsed.

14 Comments
Ryahn

This will start to become very common these days. First Target and next our brains

9 years ago
Permalink

Comment has been collapsed.
satyam001

thanks for the advise :D

9 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 5 years ago.

9 years ago
Permalink

Comment has been collapsed.
Ryahn

Its one of those things. They thing its smart and easy to store all the info in the world and then remove it later.

Just easier to store the last 4 digits, card issuer and transaction ID. You cant go wrong there.

9 years ago
Permalink

Comment has been collapsed.
doctorofjournalism

Yeah, it's either gross incompetence or some sort of malware placed on-site to copy the information before it's encrypted/transmitted. For the latter to occur, it would still point to inadequate and/or incompetent site security.

9 years ago
Permalink

Comment has been collapsed.
doctorofjournalism

bump for those unaware

9 years ago
Permalink

Comment has been collapsed.
MSKOTOR

Yes.

9 years ago
Permalink

Comment has been collapsed.
TheBaddestRat

So, if I used Paypal would the credit card on the account be compromised as well, or is it just people who entered it manually?

I bought Watch Dogs physical copy for $5 a few months ago, maybe half a year.

9 years ago
Permalink

Comment has been collapsed.
doctorofjournalism

No, that wouldn't be an issue.

9 years ago
Permalink

Comment has been collapsed.
MikuIT

I used my debit card once last year to pay in a nearby GameStop, does that mean my €0.27 balance is at risk? :3
Or is this breach limited to USA servers?

9 years ago
Permalink

Comment has been collapsed.
Zelrune

Bump. I stopped using GameStop out of spite years ago. Thanks for the info though.

9 years ago
Permalink

Comment has been collapsed.
Jaxed

Update: If you made a purchase with a credit card from their online store Gamestop.com (no breach in the physical stores...yet) between August 2016 and February 2017 you may have been compromised.

And Doc called it, they weren't storing the CVV2 so more than likely malware on site intercepting them.

Source: Just got a letter from them with a lukewarm apology and advice.

So done with this company.

9 years ago
Permalink

Comment has been collapsed.
doctorofjournalism

Thanks for the update! Edited to include in OP.

9 years ago*
Permalink

Comment has been collapsed.
Ekaros

Thankfully my purchase was 5 years ago... So I'm probably safe...

Never using them again though...

9 years ago
Permalink

Comment has been collapsed.

Closed 6 years ago by doctorofjournalism.