SCUF Gaming International, LLC

SCUF Gaming International, LLC reported a security incident affecting its webstore (www.scufgaming.com). Between February 3, 2021, and March 16, 2021, login credentials for a third-party vendor were used to insert an unauthorized script onto the backend system. The script was capable of capturing credit card information (cardholder name, email, billing address, card number, expiration date, CVV). The script was detected and removed on March 16, 2021. The investigation concluded the exposure window ended July 21, 2021. Notifications were sent to affected consumers in multiple states.