Retailer says customer payment and other information may have been exposed via the breach of [24]7.ai online chat provider.
Best Buy last week joined Sears Holding Corp. and Delta Airlines in disclosing that their customer data was exposed via a breach of online chat provider [24]7.ai.
The electronics retailer said its customers' payment information may have been compromised between Sept. 27 and Oct. 12, the timeframe [24]7.ai said it had suffered a security breach.
"Since we were notified by [24]7.ai, we have been working to determine the extent to which Best Buy online customers' information was affected. We have done that in collaboration with our third-party vendor and have notified law enforcement. As best we can tell, only a small fraction of our overall online customer population could have been caught up in this [24]7.ai incident, whether or not they used the chat function," Best Buy said in an April 5 statement on its website.
Best Buy's revelation follows that of Sears and Delta Airlines. Sears last week said credit card information belonging to about 100,000 of its customers may have been stolen during online transactions, and Delta said names, addresses, card numbers, CVV numbers, and card expiration dates of potentially several hundred thousand customers were exposed via the [24]7.ai breach.
Read more from Best Buy here.
Join Dark Reading LIVE for two cybersecurity summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the security track here. Register with Promo Code DR200 and save $200.
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024