security [UPDATED] Newegg Breached by Magecart Card Skimmer

[rcmaehl]

Source:

RiskIq

TechCrunch

 

TL;DR:

If you purchased an item between August 14 and September 18 on Newegg, you may need to call your bank

 

Media (courtsey @Pretzel4000):

 

 

Quotes/Excerpts:

Quote

Newegg is clearing up its website after a month-long data breach. Hackers injected 15 lines of card skimming code on the online retailer’s payments page... between August 14 and September 18. The code siphoned off credit card data from unsuspecting customers. The code also worked for both desktop and mobile customers — though it’s unclear if mobile customers are affected. The online electronics retailer removed the code on Tuesday after it was contacted by incident response firm Volexity. When reached, a Newegg spokesperson did not immediately comment. “The breach of Newegg shows the true extent of Magecart operators’ reach,” The hackers “integrated with the victim’s payment system and blended with the infrastructure and stayed there as long as possible.” Anyone who entered their credit card data during the period should immediately contact their banks.

 

My Thoughts:

With the scope of Magecart, we may start seeing additional websites reporting the same thing shortly. If you have purchased from newegg recently, be sure to contact your bank!

Edited September 19, 2018 by rcmaehl
Add image. Courtsey Pretzel4000

[ItsMitch]

God... God bless Amazon... anyone? anyone? 

[RKarim]

Just now, SC2Mitch said:

God... God bless Amazon... anyone? anyone? 

Nope. They just started using lasership in my area.

 

 

[Windows7ge]

I just bought a couple things yesterday night but I paid through PayPal.

[rcmaehl]

!@#$

 

Paypal has locked my account and any transactions. Related?

[Firewrath9]

Solution: Go to a CVS or other store and buy newegg and amazon gift cards with cash.

[maartendc]

3 minutes ago, rcmaehl said:

!@#$

 

It seemingly affects paypal too. Paypal has locked my account and any transactions

 

FUCK, I just bought something on Newegg 2 days ago.

 

Does it affect paypal transactions? I haven't heard anything from Paypal, and as far as I know, Paypal doesn't share payment info with the seller website? ?

 

[rcmaehl]

1 minute ago, maartendc said:

 

FUCK, I just bought something on Newegg 2 days ago.

 

Does it affect paypal transactions? I haven't heard anything from Paypal, and as far as I know, Paypal doesn't share payment info with the seller website? ?

 

No pending transactions but I logged in yesterday no problem to purchase from newegg. Today, all of a sudden it's asking for password changes and PIN setup.

[DVA]

6 minutes ago, Windows7ge said:

I just bought a couple things yesterday night but I paid through PayPal.

Always go with paypal ;D

[Docretier]

4 minutes ago, valdyrgramr said:

Checks Newegg order history

Oh good, I bought the x399 and Ripjaw a month before that happened.

Nice, I was debating whether to order a power supply of amazon or Newegg two days ago, chose amazon so I’m safe too lol.

[RKarim]

5 minutes ago, DVA said:

Always go with paypal ;D

Agreed

[Windows7ge]

Just checked my PayPal but it hasn't prompted me for password or PIN changes. I may have placed my order just after they fixed it. I put it in at 2:29PM EST

[dtaflorida]

OP said his paypal got locked. Is this affecting paypal? 

[rcmaehl]

Just now, dtaflorida said:

OP said his paypal got locked. Is this affecting paypal? 

I can't confirm this but it's extremely coincidental. I'll be contacting paypal business support during my lunch to confirm with them if this is related.

[Pretzel4000]

Yup, just got an email from Newegg:

 

[rcmaehl]

1 minute ago, Pretzel4000 said:

Yup, just got an email from Newegg:

 

Mind if I add this to the original post?

[Pretzel4000]

@rcmaehl Go ahead.

[Pretzel4000]

I have bought a few things during the affected period.

 

[Pretzel4000]

13 minutes ago, VegetableStu said:

well actual shit. he bought half his rig from newegg on monday.

That sucks. I bought my new GPU on 03 Sep

[rcmaehl]

1 minute ago, VegetableStu said:

does this affect transactions in that date range with the card already existing before 14 august? o_o (going by the nature of the number needing to be entered)

Any data added, to the page during that period such as a new card or verifying an old card by re-entering the card number is likely affected. If you did not enter the full card number you should be fine.

[Franck]

I haven't got the email yet but i bought a complete PC from them in this date range. I assume it affect both the .com and .ca

[Bitl]

Did this take any info from new accounts registered (and put card info in after that) during that period that didn't check out or did this happen in the checkout area only? 

[Tristerin]

Ive literally bought 5 items just this week from them.  And I JUST posted a rant review about them LOL.

[cp65]

I bought something on 8/11 and haven't received an email, so it looks like I just missed it.

[Blademaster91]

I bought something on 8/28, but didn't get an email yet either.