Big Fish Games, Inc.

Big Fish Games reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-02-18. 493 Massachusetts residents were affected. The report records the breach type as electronic.

Big Fish Games disclosed that an unknown criminal installed malware on its online billing and payment pages between December 24, 2014, and January 6, 2015. The malware intercepted customer payment information, including name, address, card number, expiration date, and CVV2 code. The incident was discovered on January 12, 2015. The company removed the malware, reported the incident to law enforcement and card networks, and offered one year of identity protection services to affected customers.

Big Fish Games, Inc. notified the NH AG of a security breach affecting 146 NH residents. Malware intercepted payment details (name, address, card number, CVV) entered between Dec 24, 2014 and Jan 8, 2015. Self-discovered Jan 12, 2015. Response included malware removal, forensic investigation, and notifying card networks and law enforcement. Affected individuals offered Experian credit monitoring.