Avery Products Corporation is warning it suffered a data breach after its website was hacked to steal customers' credit cards and personal information.
Avery is an American company that produces and sells self-adhesive labels, apparel branding elements, and printing services.
In a data breach notification sent to impacted customers, Avery discovered they were attacked on December 9, 2024.
Following an internal investigation by digital forensic experts, it was discovered that threat actors had planted a card skimmer on 'avery.com,' the company's online shop domain, on July 18, 2024.
As a result, sensitive payment information customers inputted on Avery's website between July 18, 2024, and December 9, 2024, were exfiltrated to the threat actors.
"On December 9, 2024, Avery became aware of a ransomware attack relating to certain systems,"
reads the notice.
