Payment Gateway Slim CD Notifies 1.7M Cardholders of Hack

Electronic-payment gateway Slim CD has notified customers that its systems were hacked starting more than a year ago, potentially exposing the names, addresses, and credit card information of nearly 1.7 million individuals.

The Coral Springs, Florida-based company that handles credit card payments for merchants in the U.S. and Canada said it first noticed suspicious activity within its computer networks about three months ago, on June 15. During a subsequent investigation by a third-party specialist, it was determined hackers had access to Slim CD’s systems since August 17, 2023.

However, said the company, the access obtained “may have enabled an unauthorized actor to view or obtain certain credit card information” for two days—June 14 and June 15 of this year.

According to the notice, Slim CD, which also allows merchants to handle payments by debit, gift cards and checks, said it “moved quickly to investigate and respond to the incident, assess the security of Slim CD systems, and identify potentially affected individuals.” The company has also notified federal authorities, it added.

“Slim CD continues to review and enhance its existing policies and procedures relating to data protection and security. Slim CD has also implemented additional security measures to mitigate risk associated with this incident and to help prevent future similar incidents,” Slim CD said.

Notifications started going out by email on September 6. The notice encouraged consumers to remain on the lookout for fraudulent activity, and it listed the three major credit reporting companies to report fraud or request a credit freeze. Slim CD said it has no evidence that any information access has been used to commit identity theft or fraud.