I got this email from Vaporshark a little while ago:
SECURITY UPDATE
At Vapor Shark, we understand that in today’s world your personal and private information is more important than ever. In late June of this year, we began receiving mixed data regarding a possible breach of security on our retail website. Despite us not immediately understanding the full scope, extent, or cause of what was happening, we immediately had our developers research the issue and ramp up security measures to ensure data safety and security during our investigation which has now been concluded.
Upon further examination, we discovered malicious code which appeared to have been siphoning credit card information from our retail, customer-facing website on or after June 23rd, 2015. Our wholesale website was not affected.
A Sucuri.net blog from the same date released a notice regarding a recently discovered Magento vulnerability which quietly attaches to your code and makes it virtually undetectable unless you actively seek it out, which we did.
See more info on that blog here.
The malicious code was immediately contained, isolated, and completely removed by July 14th, 2015. To supplement our internal security measures, we enrolled the services of Sucuri.net, a leader in internet commerce security. Our website, which is hosted by Amazon, is scanned by Sucuri.net on a daily basis for viruses, malware, and spyware. If any malicious content is found with Sucuri.net it is immediately flagged, isolated, and removed by the development team. Additionally, our site is also protected from intrusion by Incapsula, the same company and service that secures companies like eHarmony, WIX, Newsweek, SIEMENS and Motley Fool.
If you have reason to believe that you may have been affected, please contact your card issuing bank and inform them. We are working with VISA, MasterCard, and American Express regarding this issue and they will be able to address your concerns adequately.
We sincerely apologize for any inconvenience this may have caused. Vapor Shark takes the safety of your personal and private information very seriously. Our website has been free of malicious code since we discovered and corrected the issue; it is secure, it is safe and it is being monitored on a 24 hour schedule. You can check the status of our site at anytime going forward by clicking on the Sucuri banner at the top of our home page or by clicking this link.
Thank You,
Vapor Shark
SECURITY UPDATE
At Vapor Shark, we understand that in today’s world your personal and private information is more important than ever. In late June of this year, we began receiving mixed data regarding a possible breach of security on our retail website. Despite us not immediately understanding the full scope, extent, or cause of what was happening, we immediately had our developers research the issue and ramp up security measures to ensure data safety and security during our investigation which has now been concluded.
Upon further examination, we discovered malicious code which appeared to have been siphoning credit card information from our retail, customer-facing website on or after June 23rd, 2015. Our wholesale website was not affected.
A Sucuri.net blog from the same date released a notice regarding a recently discovered Magento vulnerability which quietly attaches to your code and makes it virtually undetectable unless you actively seek it out, which we did.
See more info on that blog here.
The malicious code was immediately contained, isolated, and completely removed by July 14th, 2015. To supplement our internal security measures, we enrolled the services of Sucuri.net, a leader in internet commerce security. Our website, which is hosted by Amazon, is scanned by Sucuri.net on a daily basis for viruses, malware, and spyware. If any malicious content is found with Sucuri.net it is immediately flagged, isolated, and removed by the development team. Additionally, our site is also protected from intrusion by Incapsula, the same company and service that secures companies like eHarmony, WIX, Newsweek, SIEMENS and Motley Fool.
If you have reason to believe that you may have been affected, please contact your card issuing bank and inform them. We are working with VISA, MasterCard, and American Express regarding this issue and they will be able to address your concerns adequately.
We sincerely apologize for any inconvenience this may have caused. Vapor Shark takes the safety of your personal and private information very seriously. Our website has been free of malicious code since we discovered and corrected the issue; it is secure, it is safe and it is being monitored on a 24 hour schedule. You can check the status of our site at anytime going forward by clicking on the Sucuri banner at the top of our home page or by clicking this link.
Thank You,
Vapor Shark
