Skip to main content

GameStop.com customers' credit card information may have been compromised

GameStop storefront from outside.
Image used with permission by copyright holder
GameStop is investigating a possible security breach that may have compromised customers’ credit card and personal information. GameStop admitted it was looking into the breach after KrebsOnSecurity notified the video game seller of potential hacks. Two unnamed sources in the financial industry tipped off the security news site that a credit processor discovered the breach.

In a statement to KrebsOnSecurity, a GameStop spokesperson said, “GameStop recently received notification from a third party that it believed payment card data from cards used on the GameStop.com website was being offered for sale on a website. That day a leading security firm was engaged to investigate these claims. Gamestop has and will continue to work non-stop to address this report and take appropriate measures to eradicate any issue that may be identified.”

At this time, the alleged hacks only apply to GameStop.com, not the company’s  7,000-plus store locations. According to KrebsOnSecurity’s sources, the intrusions took place over a period of nearly five months, from mid-September to early February, but GameStop has not confirmed that timeframe.

KrebsOnSecurity’s sources claim that credit card numbers, names, addresses, and three-digit card verification codes on the backs of cards were potentially exposed and stolen by hackers. Card verification codes, which are used for many online purchases, are encrypted before being sent for processing and are not allowed to be stored by merchants. But with malicious software, hackers can copy the card verification value before it goes through this process.

GameStop also offered advice for anyone potentially affected by the security breach:

“We regret any concern this situation may cause for our customers. GameStop would like to remind its customers that it is always advisable to monitor payment card account statements for unauthorized charges. If you identify such a charge, report it immediately to the bank that issued the card because payment card network rules generally state that cardholders are not responsible for unauthorized charges that are timely reported.”

Since the possible breach allegedly occurred over a number of months which included the holiday season, the number of people affected by it may be significant. It’s unclear how many purchases were made on the website during the five-month period, but we certainly advise that you should watch your credit card transactions carefully.

Editors' Recommendations

Steven Petite
Former Digital Trends Contributor
Steven is a writer from Northeast Ohio currently based in Louisiana. He writes about video games and books, and consumes…
GameStop CEO takes 50% pay cut as some stores begin to reopen
GameStop storefront from outside.

GameStop is beginning to reopen stores in several countries, including the United States, and is making some salary cuts to help weather the coronavirus pandemic.

The gaming retailer is reopening stores in Italy, Germany, and Austria, as well as South Carolina and Georgia in the U.S., and will do the same in other countries and states where legally allowed. One-third of its U.S. locations will remain closed while the remainder will continue curbside pickup.

Read more
GameStop shows it’s not so essential after all, moves to digital-only orders
physical video game releases recover after five year slump gamestop 3 640x0

GameStop has moved to digital-only ordering after receiving intense scrutiny over its initial reaction to concerns over COVID-19, better known as the coronavirus. GameStop initially told employees to refuse to close down stores despite statewide orders throughout the U.S. forcing nonessential businesses to do so.

GameStop announced this weekend that all of its U.S. storefronts will close, and it's moving orders online. The company is offering curbside pickup in addition to its regular online delivery, but gamers must make purchases through the retailer's website or mobile app.

Read more
GameStop starts selling Doom Eternal today — 1 day early — to limit crowds
doom eternal review 2

GameStop is allowing players to purchase Doom Eternal starting today, one day ahead of its official release, due to coronavirus concerns and to adhere to social distancing recommendations.

The latest first-person shooter from Id Software officially launches Friday, March 20, but GameStop is looking to adhere to social distancing guidelines set by the Centers for Disease Control and Prevention (CDC). The health organization recommended canceling all gatherings of more than 50 people last week, and President Donald Trump later said groups should be limited to no more than 10 people.

Read more