As reported first by KrebsOnSecurity, the California-based PCM Inc. discovered an intrusion on their systems in May 2019. The attackers pilfered the firm’s Office 365 administrative credentials to intrude into their systems.
The intruders appeared primarily interested in stealing information that could be used to conduct gift card fraud at various retailers and financial institutions.This made Krebs suspect that the attackers were the same who were behind the Wipro security breach.
While Krebs tried to reach PCM Inc. for comments, he couldn’t hear back in this regard. Nonetheless, in a statement to Krebs, the firm confirmed the data breach they have allegedly contained.
From its investigation, impact to its systems was limited and the matter has been remediated.Nonetheless, they downplayed the extent of the hacking attack.
The incident did not impact all of PCM customers; in fact, investigation has revealed minimal-to-no impact to PCM customers.Besides, they also assured that they have duly informed any PCM customers potentially affected during the incident.
To the extent any PCM customers were potentially impacted by the incident, those PCM customers have been made aware of the incident and PCM worked with them to address any concerns they had.However, things remain unclear regarding the exact number of customers affected during this incident, and the precise details breached during the attack.
Let us know your thoughts in the comments.
