Posted on March 6, 2018 at 7:45 AM
Hackers Reached out NIS America by Stealing Payment Card Data
The American branch of the Japanese gaming developer Nippon Ichi Software has recently confirmed that it was hacked. The data breach supposes a serious risk for the financial and personal data provided by its customers. In order to offset them, the company has started to offer an apology gift in the way of a discount of $5 codes for future deals at their online sites, but only to those customers who were struck.
The company informed impacted customers through an email sent last week. It detailed the hack was perpetrated on its online sites, including www.store.nisamerica.comand and www.snkonlinestore.com, from January 23rd to February 26th.
The hack and the hackers
During those dates, hackers were able to reach customer´s information regarding addresses and other details for new orders placed through credit cards. Nevertheless, the infringement didn´t reach those customers who paid through PayPal system.
In the email, NIS America reported they noticed the hack by the morning of February 26th. They informed it was carried out through the checkout process of their web pages. They also explained the process began on January 23rd, 2018. Customer´s information was swept during the checkout step right after placing an order on the websites. Thereafter, the hackers would take back customers to NIS America sites an allow them to complete their purchases.
Although all purchases carried out in this way on the NIS America sites were able to be completed, all the information collected by hackers during the transactions is subject to be used for defrauding purposes.
According to NIS, they do not use to keep customer´s payment card data entered in their stores and obtained from user accounts.
They explained that user accounts are solely used to follow up customer´s orders and offer them rewards. In any case, previous orders only keep four digits of credit cards without including an expiration date or CVV security code.
In order to avoid new hacks, NIS America took offline its sites as soon as they found out about the breach. They started to take actions to precise the date and time it started to occur in the online stores.
Actions against the hackers
Several actions were already taken by the company in order to figure out what caused the hack, as well as other actions oriented to upgrade security matters in the sites. NIS America affirmed they recognized the actions perpetrated by the hackers and took them away from their websites. They also took the necessary actions to avoid them in the future, including new security measures to all their online stores.
NIS America neither offered additional details on how the attack was perpetrated nor commented on how the breach impacted their customers.
The company warned their customers about changing their user account passwords and follow carefully their credit or bank statements in order to detect doubtful activity. They were also warned to pay attention to other methods such as false messages from texts, emails, phone calls and any other suspicious online sites which require personal information.
The offer from NIS America
It is imperative for NIS America to offer the safest place for shoppers to let them place their orders with confidence. Although the hack and all the actions carried out to solve it might be bothersome, they are committed to making their best efforts to solve it and avoid future attacks.
The company affirmed their online sites were reopened because they feel confident about their safeness. NIS America wants to gain customer´s trust back and asks them to let them show its commitment to serving them soon. They added that $5 discount code would be soon distributed to all those customers who were reached out by the hackers.
Although $5 might be considered a small amount, the company hopes it may reflect its efforts to take back customer´s trust and confidence in its online stores.
