GameStop Investigating Possible Customer Data Hack

Retailer Gamestop is investigating a potential data breach from GameStop.com that includes customer credit card information, according to KrebsOnSecurity.

In a statement, Gamestop confirms it was tipped off about the possible data breach and is actively investigating the claims.

Read: GameStop To Close 150 Stores Worldwide

“GameStop recently received notification from a third party that it believed payment card data from cards used on the GameStop.com website was being offered for sale on a website,” the company said. “That day a leading security firm was engaged to investigate these claims. GameStop has and will continue to work non-stop to address this report and take appropriate measures to eradicate any issue that may be identified.”

According to KrebsOnSecurity, sources indicate the potential breach likely occurred from September 2016 to February 2017. Data in the breach also reportedly includes information like full credit card numbers, expiration dates and multi-digit verification codes.

Elsewhere in the statement, GameStop encourages customers who made purchases through its website to keep a regular eye on their bills for irregular charges.

Read: 1 Billion Yahoo! Accounts Affected With Stolen User Data

“We regret any concern this situation may cause for our customers,” GameStop said. “GameStop would like to remind its customers that it is always advisable to monitor payment card account statements for unauthorized charges. If you identify such a charge, report it immediately to the bank that issued the card because payment card network rules generally state that cardholders are not responsible for unauthorized charges that are timely reported.”

While GameStop is still investigating the breach charges, it makes the retailer the latest company to deal with the fallout from data security issues. Within the past few years, companies and retailers including Yahoo! and Target have been victims of hacks, which is an increasingly common tool hackers use to obtain and resell personal information.