Pioneer International Group, Inc

Pioneer Student discovered on August 10, 2026, that an unauthorized party exploited a vulnerability in a third-party checkout extension to gain access to its e-commerce website starting June 16, 2026. The attacker installed malicious code on the checkout page to capture payment card numbers, expiration dates, CVV codes, billing addresses, and email addresses. The code was active during two periods: June 18-July 22, 2026, and August 4-10, 2026. A total of 630 individuals nationwide, including 3 New Hampshire residents, were affected. Pioneer Student removed the code, patched the vulnerability, rotated credentials, and is offering 12 months of credit monitoring.

Pioneer International Inc. disclosed a data breach affecting its website pioneerstudent.com. An unauthorized party exploited a vulnerability in a third-party software extension to install code capturing payment card data (card number, expiration, security code) and personal info (name, billing address, email) during two periods: June 18-July 22, 2026, and August 4-10, 2026. The incident was discovered on August 10, 2026. The company removed the code, patched the vulnerability, rotated credentials, and offered identity protection services.