KrebsonSecurity is reporting that the online store GameStop may have had its payment card system breached.

GameStop is pursuing an investigation after it was notified by a third party that some customer data was for sale online. KrebsonSecurity reports that it received notifications from two financial industry sources that they had been warned by a credit card processor that data was stolen between September 2016 and February 2017.

The breach may have exposed customer names, addresses, payment card numbers, expiration dates and CVV codes.

“If Brian Krebs' report is correct, the GameStop breach has the potential to be a huge payday for hackers. Compromised credit card numbers aren't always easy to monetize, but in this case hackers were able to intercept CVV2 numbers, which allow them to begin making fraudulent purchases immediately,” Vishal Gupta, Seclore CEO.

This attack could signal a time that smaller retailers are simply unable to protect their data from cybercriminals.

"You can imagine a future where attacks such as this become so sophisticated and frequent that no one but the largest retailers can afford to defend against them. This would give the Amazons and Walmarts of the world a real competitive advantage in winning consumers' business," John Gunn, CMO of VASCO Data Security.

GameStop has not responded to the reports as yet.

Source: SCMagazine