Canadian payment gateway provider Slim CD has been the victim of a cyberattack affecting nearly 1.7 million US and Canadian users.
The company first detected suspicious activity on its system on June 15, 2024, however an investigation revealed that the system had first been breached on August 17, 2023, meaning hackers had access to its network for almost a year.
Slim CD insists that the hackers only had access to credit card information for two days between June 14 and 15, but the information they accessed may include full names, credit card numbers, expiration dates and the customer's physical address.
Without additional protection
As a payment processing service, Slim CD stores credit card information to enable users and businesses to access online card payments.
The company has assured users that it has taken “steps to implement additional safeguards” and review its policies related to data security and privacy, as well as reporting the incident to federal regulatory and law enforcement authorities.
Slim CD did not offer those affected any free identity theft protection services. Instead, the company advised customers to take steps to protect themselves.
“We encourage you to remain alert to incidents of identity theft and fraud by reviewing your account statements and monitoring your free credit reports for suspicious activity and errors,” the firm said in a statement.
This is the latest in what seems to be an endless series of data breaches, with threat actors Gaining access to millions of people's information through various security breaches in recent times.
There are dedicated Identity theft protection services that can help those affected by the ever-present threat of data breaches.