Data-collection script injected into Nordace checkout page
An unauthorised Google Tag Manager container and a data-collection script were injected into the checkout page of Hong Kong travel goods company Nordace. The script could send addresses, contact details and payment card information to an external destination, but whether any information was actually collected remains unconfirmed.
Key facts
- Affected organisation
- Nordace
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Injection of an unauthorised Google Tag Manager container and a data-collection script into the checkout page
- Location
- Hong Kong SAR China
Timeline
- The injection of an unauthorised container and a data-collection script into Nordace’s checkout page was disclosed.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.