Security News > 2021 > October > SCUF Gaming store hacked to steal credit card info of 32,000 customers
SCUF Gaming International, a leading manufacturer of custom PC and console controllers, is notifying customers that its website was hacked in February to plant a malicious script used to steal their credit card information.
SCUF Gaming makes high-performance and customized gaming controllers for PCs and consoles, used by both professional and casual gamers.
SCUF Gaming customers were the victims of a web skimming attack.
Threat actors inject JavaScript-based scripts known as credit card skimmers into compromised online stores which allow them to harvest and steal customers's payment and personal info.
"Our investigation has determined that orders processed via PayPal were not compromised and that the incident was limited to payments or attempted payments via credit card between February 3rd and March 16th," SCUF Gaming says in breach notification letters sent to affected individuals.
"This communication does not mean that fraud did or will occur on your payment card account," SCUF Gaming told affected customers today.