Warner Music Group finds hackers compromised its online stores

Warner Music Group (WMG), the third-largest global music recording company, has disclosed a data breach affecting customers' personal and financial information after several of its US-based e-commerce stores were hacked in April 2020 in what looks like a Magecart attack.

With a history of over 200 years, WMG has more than 3,500 employees and it operates in over 70 countries via a network of subsidiaries, affiliates, and non-affiliated licensees.

WMG also owns the Warner Chappell Music music publisher and some of the most successful recording labels in the world including but not limited to Elektra, Warner Records, Atlantic, Warner Classics, Parlophone, and Warner Music Nashville.

US online stores compromised since AprilThe company said that the incident involved multiple e-commerce websites it operates via an external service provider and that the security breach may have enabled hackers to steal personal info entered into the sites.

"On August 5, 2020, we learned that an unauthorized third party had compromised a number of US-based e-commerce websites WMG operates but that are hosted and supported by an external service provider," the company said in a breach notification letter sent to affected individuals.

"This allowed the unauthorized third party to potentially acquire a copy of the personal information you entered into one or more of the affected website(s) between April 25, 2020 and August 5, 2020."

Even though WMG's investigation didn't find any signs of information being exfiltrated, it doesn't exclude the possibility of it happening and warns affected individuals of the risk of fraudulent activity that could be carried out using stolen personal and financial details during the attack.

Full article on https://www.bleepingcomputer.com/news/security/warner-music-group-finds-hackers-compromised-its-online-stores/

#warner #wmg #hack #customer #financial #yokdata #mindyourdata