PulseTV has started notifying roughly 200,000 users that their personal information and credit card data might have been compromised as a result of a cybersecurity breach.
According to the online shopping platform, its website (pulsetv.com) was “a common point of purchase” for a series of unauthorized credit card transactions, and both VISA and MasterCard cards have been affected.
In the notification letter to the affected individuals (a copy of which was submitted to the Maine Attorney General’s Office), PulseTV explains that it was first alerted of the suspicious activity by VISA, in March 2021.
After performing malware scans and other checks, the company did not find “any ongoing compromise involving customer credit cards.” PulseTV also says that it did not receive customer complaints about credit card use on its website prior to receiving the notification from VISA.
An investigation into the incident was launched in the fall, after law enforcement told the company of additional payment card compromises seemingly originating from its website.
In late November, the investigation revealed “that the website had been identified as a common point of purchase for a number of unauthorized credit card transactions for MasterCard.”
The incident may have impacted all users who made purchases on pulsetv.com using a credit card between November 1, 2019, and August 31, 2021.
“The investigation was unable to verify that the website was the cause of the unauthorized transactions,” PulseTV says.
In addition to credit card information – card numbers, expiration dates and card security codes (CVVs) – the potentially compromised information includes names, addresses, and email addresses.
The company has also described the steps it has taken or plans to take in order to improve the security of user data, including adding two-factor authentication on internal devices, using end-point detection and response solutions, and migrating to a different payment system.
Related: Marine Services Provider Swire Pacific Offshore Discloses Data Breach
Related: Panasonic Investigating Data Breach
Related: HPE Says Customer Data Compromised in Aruba Data Breach