Payment processor Slim CD has reported a data breach that exposed the credit card and personal information of nearly 1.7 million people.

According to a notification sent to those affected, the company revealed that unauthorized access to its network persisted for almost a year, from August 2023 to June 2024.

Slim CD specializes in providing payment processing solutions, allowing businesses to handle electronic and card payments via web-based terminals, mobile devices, or desktop applications. The firm first noticed unusual activity on its systems on June 15, 2024. During a subsequent investigation, it was found that hackers had infiltrated the network as early as August 17, 2023.

"The investigation identified unauthorized system access between August 17, 2023, and June 15, 2024," the notification stated.

Slim CD clarified that the cyber attackers accessed credit card information over a span of two days, specifically on June 14 and June 15, 2024. "That access may have enabled an unauthorized actor to view or obtain certain credit card information between June 14, 2024, and June 15, 2024," the company noted in the breach notification.

The data potentially compromised includes:

Although the exposed information does not include card verification numbers (CVV), and thus isn't sufficient for fraudulent transactions, the risk of credit card fraud remains.

Slim CD has implemented enhanced security measures to prevent future breaches. Additionally, the company advises those affected to stay alert for any signs of fraud or identity theft and to promptly report any suspicious activities to their card issuer.

Unlike some companies, Slim CD has not offered free identity theft protection services to those impacted. While Slim CD's services cater to various sectors, such as retail, hospitality, and restaurants, many individuals receiving these notifications may be unfamiliar with the company, as they have not directly interacted with it.