
Return To ArticleAs its website has been hacked with code that steals shoppers’ payment information, Macy’s announced it has experienced a data breach. The website was compromised in early October, and a malicious script was added to the My Wallet and Checkout pages, Bleeping Computer reported.
If payment information was sent through those pages at the time they were compromised, according to the outlet, customer information and credit card data was sent to a remote site under control of the attacker. That kind of compromise, which is known as a Magecart attack, involves hackers compromising a website so they can put malicious JavaScript scripts into different sections of the site. Those scripts then take the payment information that a shopper submits.