Svanaco, Inc.

Svanaco, Inc. (dba Americaneagle.com) disclosed that an unauthorized actor used compromised employee credentials to install malicious code on the Nueske's e-commerce platform hosted by Americaneagle.com. The malware captured payment card information (names, card numbers, expiration dates, security codes) for transactions processed between July 25, 2022, and December 9, 2022. The incident was detected on November 16, 2022. The company engaged forensic investigators, secured the store, and notified payment card brands and law enforcement.