/

Best Buy Data Breach: What & How It Happened?

Best Buy Data Breach: What & How It Happened?

Twingate Team

Jun 20, 2024

In April 2018, Best Buy publicly acknowledged a data breach that occurred between September 27 and October 12, 2017. The breach was due to a cyber intrusion targeting their chat service provider. Hackers managed to gain access to Best Buy customer payment information, potentially affecting some online customers. Best Buy worked with law enforcement, the vendor, and cybersecurity experts to assess the damage and contacted affected customers directly.

How many accounts were compromised?

The data breach impacted over 576,000 accounts.

What data was leaked?

The data exposed in the breach included Best Buy customer payment information, such as credit card details.

How was Best Buy hacked?

Hackers targeted Best Buy's third-party chat service provider and installed malware into the chat software used by various retail companies, including Best Buy. This allowed them to steal customer payment information. The breach occurred between September 27 and October 12, 2017, and Best Buy responded by collaborating with law enforcement, the vendor, and cybersecurity experts to assess the damage and enhance their security measures. The exact number of affected customers remains unclear.

Best Buy's solution

In response to the hack, Best Buy took action by working with cybersecurity experts and law enforcement to investigate the extent of the impact on their online customers. Although the enhanced security measures taken by Best Buy remain unclear, they directly contacted affected customers and assured them that they would not be liable for fraudulent charges resulting from the incident.

How do I know if I was affected?

Best Buy contacted affected customers directly to inform them about the breach. If you're a Best Buy customer and haven't received a notification, you may visit Have I Been Pwned to check your credentials.

What should affected users do?

In general, affected users should:

  • Change Your Password: Immediately update your password for the breached account. Make sure the new password is strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on the breached account. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity. If you notice any unauthorized transactions or changes, report them immediately to the respective service provider.

For more specific help and instructions related to Best Buy's data breach, please contact Best Buy's support directly.

Where can I go to learn more?

If you want to find more information on the Best Buy data breach, check out the following news articles:

Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.

/

Best Buy Data Breach: What & How It Happened?

Best Buy Data Breach: What & How It Happened?

Twingate Team

Jun 20, 2024

In April 2018, Best Buy publicly acknowledged a data breach that occurred between September 27 and October 12, 2017. The breach was due to a cyber intrusion targeting their chat service provider. Hackers managed to gain access to Best Buy customer payment information, potentially affecting some online customers. Best Buy worked with law enforcement, the vendor, and cybersecurity experts to assess the damage and contacted affected customers directly.

How many accounts were compromised?

The data breach impacted over 576,000 accounts.

What data was leaked?

The data exposed in the breach included Best Buy customer payment information, such as credit card details.

How was Best Buy hacked?

Hackers targeted Best Buy's third-party chat service provider and installed malware into the chat software used by various retail companies, including Best Buy. This allowed them to steal customer payment information. The breach occurred between September 27 and October 12, 2017, and Best Buy responded by collaborating with law enforcement, the vendor, and cybersecurity experts to assess the damage and enhance their security measures. The exact number of affected customers remains unclear.

Best Buy's solution

In response to the hack, Best Buy took action by working with cybersecurity experts and law enforcement to investigate the extent of the impact on their online customers. Although the enhanced security measures taken by Best Buy remain unclear, they directly contacted affected customers and assured them that they would not be liable for fraudulent charges resulting from the incident.

How do I know if I was affected?

Best Buy contacted affected customers directly to inform them about the breach. If you're a Best Buy customer and haven't received a notification, you may visit Have I Been Pwned to check your credentials.

What should affected users do?

In general, affected users should:

  • Change Your Password: Immediately update your password for the breached account. Make sure the new password is strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on the breached account. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity. If you notice any unauthorized transactions or changes, report them immediately to the respective service provider.

For more specific help and instructions related to Best Buy's data breach, please contact Best Buy's support directly.

Where can I go to learn more?

If you want to find more information on the Best Buy data breach, check out the following news articles:

Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.

Best Buy Data Breach: What & How It Happened?

Twingate Team

Jun 20, 2024

In April 2018, Best Buy publicly acknowledged a data breach that occurred between September 27 and October 12, 2017. The breach was due to a cyber intrusion targeting their chat service provider. Hackers managed to gain access to Best Buy customer payment information, potentially affecting some online customers. Best Buy worked with law enforcement, the vendor, and cybersecurity experts to assess the damage and contacted affected customers directly.

How many accounts were compromised?

The data breach impacted over 576,000 accounts.

What data was leaked?

The data exposed in the breach included Best Buy customer payment information, such as credit card details.

How was Best Buy hacked?

Hackers targeted Best Buy's third-party chat service provider and installed malware into the chat software used by various retail companies, including Best Buy. This allowed them to steal customer payment information. The breach occurred between September 27 and October 12, 2017, and Best Buy responded by collaborating with law enforcement, the vendor, and cybersecurity experts to assess the damage and enhance their security measures. The exact number of affected customers remains unclear.

Best Buy's solution

In response to the hack, Best Buy took action by working with cybersecurity experts and law enforcement to investigate the extent of the impact on their online customers. Although the enhanced security measures taken by Best Buy remain unclear, they directly contacted affected customers and assured them that they would not be liable for fraudulent charges resulting from the incident.

How do I know if I was affected?

Best Buy contacted affected customers directly to inform them about the breach. If you're a Best Buy customer and haven't received a notification, you may visit Have I Been Pwned to check your credentials.

What should affected users do?

In general, affected users should:

  • Change Your Password: Immediately update your password for the breached account. Make sure the new password is strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on the breached account. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity. If you notice any unauthorized transactions or changes, report them immediately to the respective service provider.

For more specific help and instructions related to Best Buy's data breach, please contact Best Buy's support directly.

Where can I go to learn more?

If you want to find more information on the Best Buy data breach, check out the following news articles: