Home technology cyber-security the online hardware retailer Newegg suffers a data breach

The online hardware retailer Newegg suffers a data breach

Cyber Security

CIO Bulletin
2018-09-20

Newegg, the online marketplace for the hardware equipment has revealed that it has suffered a data breach. The cybersecurity compromise has resulted in a data leak pertaining to credit card information of its users.

RiskIQ and Volexity have together determined that the group behind the hack was Magecart. This group was also responsible for the recent British Airways and Ticketmaster UK hacks that happened this year. The group had created a webpage “neweggstats.com” and went on to infiltrate the web servers of Newegg. They then added 15 lines of JavaScript code to the Newegg purchase checkout page that could intercept all data that a customer typed into the page’s form fields. To complete the hack the page then sent the information to the neweggstats.com.

Newegg made the announcement about the breach on its Twitter page saying that the malware was identified and removed from their site. They are also looking into the data that was stolen due to the compromise and are sending emails to the customers who may have been “potentially impacted.” The company plans to post an FAQ on its website on Friday but if you are a customer, we suggest you check your mail!