Four affiliated online sports gear sites have disclosed a cyberattack where threat actors stole credit cards for 1,813,224 customers.
While not much is known about the attack, a law firm representing the four websites stated that personal information and credit card information, including full CVV, were stolen on October 1st, 2021.
The affected websites are the following:
- Tackle Warehouse LLC (tacklewarehouse.com) – Fishing gear
- Running Warehouse LLC (runningwarehouse.com) – Running apparel
- Tennis Warehouse LCC (tennis-warehouse.com) – Tennis apparel
- Skate Warehouse LLC (skatewarehouse.com) – Skateboards and skating apparel
The sites first learned of the breach on October 15th, and after an investigation, confirmed on November 29th the customers that had their payment information stolen.
The details that have been compromised as a result of this incident are the following:
- Full name
- Financial account number
- Credit card number (with CVV)
- Debit card number (with CVV)
- Website account password
After the conclusion of the investigation, the websites sent notices to the affected individuals on December 16th, 2021.