Expert Comments

Garmin SA Shopping Portal Breach Leads To Payment Data Theft

Expert(s): Security Experts
Expert(s): Security Experts Published: Last Updated on

Garmin Southern Africa (Garmin SA) has disclosed in a series of notifications sent to its customers that payment and sensitive personal information were stolen from orders placed on the shop.garmin.co.za shopping portal.

“We recently discovered theft of customer data from orders placed through shop.garmin.co.za (operated by Garmin South Africa) that compromised your personal data related to an order that you placed through the website,” said Jennifer Van Niekerk, South Africa Managing Director. The compromised data was limited to only Garmin’s South Africa site, and contained payment information, including the number, expiration date and CVV code for your payment card, along with your first and last name, physical address, phone number and email address.”

While the cause of the breach is not mentioned in the notification email to the impacted Garmin SA customers, there are signs that the shop.garmin.co.za portal was the victim of a Magecart group.

Experts Comments

Dot Your Expert Comments
Peter Draper
September 16, 2019
Technical Director, EMEA
Gurucul

One of the key elements of this attack is that the bad actors need to send the data to their own servers to actually collect the information.
A number of companies have been caught by Magecart recently, British Airways and Ticketmaster to name but two. Companies taking payments through their website need to limit access for scripts in their websites to offer the best protection for user data being entered. One of the key elements of this attack is that the bad actors need to send the data to their own servers to actually collect the information. UEBA and Network Analytics can be used to identify abnormal traffic, such as the sudden.....Read More
A number of companies have been caught by Magecart recently, British Airways and Ticketmaster to name but two. Companies taking payments through their website need to limit access for scripts in their websites to offer the best protection for user data being entered. One of the key elements of this attack is that the bad actors need to send the data to their own servers to actually collect the information. UEBA and Network Analytics can be used to identify abnormal traffic, such as the sudden outbound traffic from the website servers to unknown external devices and in combination with automated security controls can stop the exfiltration of data as soon as it is identified. This reduces the impact and the number of users affected whilst alerting security teams to the issue and allowing them to focus their attention on finding and removing the malicious code.  Read Less

Dot Your Expert Comments


Only for registered and approved experts. Please register before providing comments. Register here
* By using this form you agree with the storage and handling of your data by this web site.
Submit
0
FacebookTwitterLinkedinWhatsappEmail

You may also like

15 Schools Hit By Cyberattack In Nottinghamshire

Qualys Hit With Ransomware And Customer Invoices Leaked

Experts Reaction On PrismHR Hit By Ransomware Attack

Expert Insight On Ryuk’s Revenge: Infamous Ransomware Is Back And...

ObliqueRAT Trojan Lurks On Compromised Websites – Experts Comments

Microsoft Multiple 0-Day Attack – Tenable Comment

Experts Reaction On Malaysia Airlines 9 Years Old Data Breach

IoT Security In The Spotlight, As Research Highlights Alexa Security...

Oxfam Australia Confirms ‘Supporter’ Data Accessed In Cyber Attack

Expert Reaction On Solarwinds Blames Intern For Weak Passwords