Avery's Credit Card Skimmer Scam

Avery Had Credit Card Skimmer Stuck on its Site for Months

Avery Products Corporation, a company known for its labels and office supplies, experienced a significant data breach. Hackers managed to insert a credit card skimmer on Avery's website, which went unnoticed for several months. This skimmer was active from July 18, 2024, to December 9, 2024. Visit Malwarebytes Home Page to read more on this, in its cyber news section.

What is a Credit Card Skimmer?

A credit card skimmer is a device or software used by cybercriminals to steal credit card information. They are typically attached to card readers, such as ATMs or gas pumps, and can go unnoticed by users. When you swipe your card, the skimmer captures the data from the magnetic stripe, including your card number, expiration date, and security code. This stolen information can then be used for fraudulent transactions. Skimmers can also be installed on e-commerce websites through malicious code, allowing hackers to capture credit card details during online purchases. Staying vigilant can help protect against these devices. The video below gives an insight into Credit Card Skimmers.

How Avery Credit Card Skimmer Scam Happened

1. Skimmer Installation: Cybercriminals planted malicious software on Avery's website. This software was designed to "Scrape" or collect Credit Card information entered by customers during online purchases.

2. Data Collected: The skimmer captured sensitive information such as full names, billing and shipping addresses, email addresses, phone numbers, payment card details (including CVV numbers and expiration dates), and purchase amounts. Fortunately, it did not collect Social Security numbers, driver's license numbers, or birth dates.

3. Discovery: Avery discovered the breach on December 9, 2024, during an investigation into a ransomware attack. They immediately launched a forensic investigation to determine the extent of the breach.

4. Impact: Approximately 61,193 customers were affected by this incident. Avery has received reports from some customers who noticed fraudulent charges and phishing attempts.

Avery Response to Credit Card Skimmer Scam

1. Notification: Avery notified affected customers about the breach and the potential risks.

2. Mitigation: To help protect customers, Avery is offering 12 months of free credit monitoring and identity theft protection services through Cyberscout.

3. Advice: Customers are advised to monitor their financial statements closely, be cautious of unsolicited communications, and report any suspicious activity to their bank and authorities.

How to Protect Yourself From Credit Card Skimmer Scam with Malwarebytes

• Run a Security Solution like Malwarebytes. Most antivirus products—including Malwarebytes_Premium offer some kind of web protection that detects malicious domains and IP addresses.

• Enable in-browser protection. Malwarebytes Browser Guard (on Malwarebytes Home Page click on Personal > Browser Guard). Malwarebytes Browser Guard is a browser extension available for Chrome, Edge, Firefox and Safari—blocks card skimmers. It also stops annoying ads and trackers, warns about breaches, and flags malicious websites.

• Monitor Your Financial Statements. Regularly check your online bank and credit card statements. Flag anything that seems suspicious.

• Set up Identity and Credit Monitoring. Identity monitoring alerts you if your personal information is found being illegally traded online, and helps you recover after. Credit monitoring tracks your credit report and borrowing behavior and alerts you if anything changes. You may Check if Your Digital Footprint has been Compromised.

This incident highlights the importance of cybersecurity measures for both companies and individuals. Regularly updating security software, enabling browser protection, and monitoring financial transactions can help prevent such Credit Card Scams.