Acer website hacked compromising credit card details of 34500 customers

Acer, a Taiwanese Company, has revealed to California’s Attorney General (AG) that hackers broke into the company’s online store and grabbed sensitive customer data.

The leaked data includes information such as customer names, addresses, and credit card numbers including expiry dates and three-digit CVC security codes. The hack affects 34,500 customers based in the United States, Canada, and Puerto Rico.

In a letter submitted to California’s AG. They had recently identified a security issue involving the information of certain customers who used their ecommerce site between May 12, 2015 and April 28, 2016, which resulted in unauthorized access by a third party.

To contain the situation, Acer said that they had taken immediate steps to remediate this security issue upon identifying it, and we are being assisted by outside cybersecurity experts.

“We have reported this issue to our credit card payment processor. We have also contacted and offered our full cooperation to federal law enforcement,” said the letter signed in by Mark Groveunder Vice President, Customer Service, Acer Service Corporation.

Since the breach, Acer has hired “outside cybersecurity experts” to investigate the breach, but at this time it does believe password or login credentials were stolen.

Softpedia noted that Acer runs its store on the Magento Enterprise platform, but the security issue came from one of its third-party payment processing systems.