Spark Pay Online Store

Spark Pay Online Store, a division of Capital One, N.A., disclosed a security event involving malicious code on a merchant website hosted by Spark Pay. The code allowed fraudsters to obtain customer payment information, including name, address, phone number, email, payment card number, expiration date, and CVV, for transactions made between April 10, 2017, and June 7, 2017. The company removed the code, notified card networks and law enforcement, and offered two years of credit monitoring.

Spark Pay Online Store reported a data breach to the Oregon Attorney General. The breach was reported on 2017-07-12. The breach occurred during 4/10/2017 - 6/7/2017. The breach was discovered on 6/6/2017. Notice was sent on 6/15/2017.