Claire’s and Icing Websites Compromised to Steal Payment Data

Summary

Between April 25 and June 13, the websites of both Claire’s and its sister brand Icing were compromised with payment skimmers that sent payment information to threat actors when customers submitted their checkout form. The company notified payment card networks and law enforcement, but it is unclear whether affected customers have been contacted yet. Information on the website compromises can be found in the Sansec report. A recent NJCCIC alert highlighted the risk to increased online shopping and the potential for checkout pages to be compromised in what are known as Magecart attacks.

Recommendations

The NJCCIC advises customers who made purchases on either affected website to monitor financial accounts and consider requesting new payment cards. Additionally, we encourage users to follow the recommendations within the previous NJCCIC alert, including using credit cards over debit cards and continually monitoring financial accounts for unauthorized activity.