Customer card data stolen at ZAGG online shop checkout
The names, addresses and payment card details of customers who made purchases on ZAGG's online shop between 26 October and 7 November 2024 were stolen. The FreshClick e-commerce app was compromised, and card-skimming code was injected into the checkout process. ZAGG announced a data breach stemming from the compromise of a third-party app.
Key facts
- Affected organisation
- ZAGG
- Incident type
- Data breach
- Occurred / detected
- 2024-10-26
- Scale of damage
- Customer names, addresses and payment card details
- Cause / method
- Card-skimming code injected into online shop checkout via compromise of the FreshClick app
- Location
- United States
If your data was exposed
Exposed dataNameAddressCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
Timeline
- The period during which data of ZAGG online shop customers was stolen began.
- The confirmed period of customer data theft ended.
- ZAGG announced a data breach stemming from a compromised third-party app.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.