Cyber attack on payment gateway provider Slim CD impacted about 1.7 million individuals

Florida-based payment gateway provider Slim CD said it experienced a data security incident that compromised the sensitive personal information of close to 1.7 million individuals.

 

Slim CD is a payment gateway service provider that processes electronic payments for businesses and merchants in the US and Canada. It offers a variety of applications that allow merchants to accept payments using credit cards, debit cards, checks, and gift cards.

 

In a filing with the Office of Attorney General of Maine, Slim CD said that on June 15, it identified a data security incident that affected its internal network. The payment gateway provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“The investigation identified unauthorised system access between August 17, 2023, and June 15, 2024. That access may have enabled an unauthorised actor to view or obtain certain credit card information between June 14, 2024, and June 15, 2024,” reads the notice.

 

The compromised data included customer’s names, addresses, credit card numbers, and card expiration dates. Slim CD’s filing with the Maine state regulator revealed that at least 1,693,000 individuals were affected by the incident.

 

“Upon discovery of this incident, we quickly commenced a thorough investigation and took steps to implement additional safeguards and review our policies and procedures relating to data privacy and security. We also took steps to report this incident to federal law enforcement, and regulatory authorities, as required by law,” Slim CD added.

 

The company has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general. Slim CD, however, did not provide any complimentary credit monitoring or identity protection services to the affected individuals.