Customer card data stolen at ZAGG online store checkout
The names, addresses and payment card details of customers who made purchases on ZAGG's online store between October 26 and November 7, 2024, were stolen. The FreshClick e-commerce app was compromised, and card-skimming code was injected into the checkout process. ZAGG announced a data breach stemming from the compromise of a third-party app.
Key facts
- Affected organization
- ZAGG
- Incident type
- Data breach
- Occurred / detected
- 2024-10-26
- Scale of damage
- Customer names, addresses and payment card details
- Cause / method
- Card-skimming code injected into online store checkout via compromise of the FreshClick app
- Location
- United States
If your data was exposed
Exposed dataNameAddressCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognize, ask the issuer to block and reissue the card.
Timeline
- The period during which data of ZAGG online store customers was stolen began.
- The confirmed period of customer data theft ended.
- ZAGG announced a data breach stemming from a compromised third-party app.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.