Inside A GameStop Corp. Store Ahead Of Earnings Figures
Customers shop for video games at a GameStop Corp. store in West Hollywood, California on May 22, 2016.  Patrick T. Fallon —Bloomberg via Getty Images

GameStop Is Investigating a Possible Credit Card Security Breach on Its Website

Apr 07, 2017

GameStop is investigating a potential security breach on its website involving customer data and credit cards.

"GameStop recently received notification from a third party that it believed payment card data from cards used on the GameStop.com website was being offered for sale on a website," a company spokesperson wrote in an email to Fortune.

"That day a leading security firm was engaged to investigate these claims," the statement continued. "GameStop has and will continue to work non-stop to address this report and take appropriate measures to eradicate any issue that may be identified."

The breached data could include customer card numbers, expiration dates, names, addresses, and the three-digit card verification values (CVV2) typically found on the back of credit cards, according to sources who spoke to cybersecurity website Krebs on Security.

Krebs on Security reports that they had received alerts from a credit card processor saying that GameStop's website was potentially comprised between September 2016 and February 2017. There is no indication that GameStop's retail locations were affected, according to Krebs.

"We regret any concern this situation may cause for our customers," the company added in its statement. "GameStop would like to remind its customers that it is always advisable to monitor payment card account statements for unauthorized charges. If you identify such a charge, report it immediately to the bank that issued the card because payment card network rules generally state that cardholders are not responsible for unauthorized charges that are timely reported."

All products and services featured are based solely on editorial selection. FORTUNE may receive compensation for some links to products and services on this website.

Quotes delayed at least 15 minutes. Market data provided by Interactive Data. ETF and Mutual Fund data provided by Morningstar, Inc. Dow Jones Terms & Conditions: http://www.djindexes.com/mdsidx/html/tandc/indexestandcs.html. S&P Index data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. Terms & Conditions. Powered and implemented by Interactive Data Managed Solutions