STERLING, Va.–Blowout Cards is reporting a security blowout of its own.
The company, which is owned by Frontline Collectibles Inc. and which offers a site devoted to the buying, selling and trading of sports cards and trading cards, said its payment system has been compromised and customers are reporting fraudulent payments being charged to them.
"Information compromised include the names, addresses, email addresses, phone numbers, credit or debit card numbers, card expiration dates, and card verification codes for customers who checked out via our website shopping cart in January 2017 through April 20th, 2017," the company said in a security alert it published.
The company said it has retained a third-party digital forensic investigation firm to assist.
"Once we became aware of this incident, we immediately launched an investigation to find and eliminate the problem," the company explained in its alert. "An exploit in the form of a modified payment .php file was uncovered which allowed the intruder(s) to skim credit card/debit card information as customers checked out via our website."
According to Blowout Cards, the malicious code has been removed from its website, and that it's locked down the flaw that the attacker exploited.
The company did not say how many customers have been affected.