Stack Sports disclosed a breach involving malicious code injected into its Sports Affinity web application platform, designed to capture payment card data during the checkout process. The code was active from approximately May 8, 2026, until its removal on June 10, 2026. The incident affected users who entered payment information through the platform during that period, potentially exposing card numbers, CVV codes, and bank account details for eCheck/ACH payments.
Breach Stack Sports notifies users of payment card data exposure July 29, 2026 Share By SC Staff Safe online payment and electronic money transfer security. Pay with digital technology. Man using credit card and laptop to login to internet bank. Financial safety to prevent scam, threat and fraud. Cyber Insider disclosed that sports technology provider Stack Sports is notifying users of a cybersecurity incident that may have exposed payment card information entered through its Sports Affinity web application platform. Stack Sports discovered suspicious activity on June 8, 2026, after its internal security monitoring systems detected unauthorized activity affecting the Sports Affinity platform. An investigation revealed that malicious code was placed on the platform around May 8, 2026, designed to capture payment-related information during the checkout process. The code was removed on June 10, 2026, with residual elements cleared by June 22, 2026. The incident was limited to users who accessed the Sports Affinity checkout process during the affected period. Exposed information may have included cardholder names, payment card numbers, expiration dates, and CVV security codes. For users who paid via eCheck or ACH, checking account numbers may also have been affected. Stack Sports is offering affected users 24 months of identity theft protection services through IDX, including credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and managed identity theft recovery services. The company encourages affected individuals to monitor their payment card statements for unauthorized activity. Source: Cyber Insider SC Staff Related Breach Origin Energy confirms data breach impacting millions of customers SC Staff July 24, 2026 Following insights from Bleeping Computer, Australian energy provider Origin Energy has confirmed a significant data breach affecting potentially millions of its customers, exposing a range of personally identifiable information. Breach Estée Lauder customer data compromised in Oracle E-Business Suite breach SC Staff July 21, 2026 The breach at Estée Lauder, a New York-based cosmetics firm with $14.3 billion in annual revenue, resulted from the exploitation of a vulnerability in Oracle E-Business Suite, specifically impacting versions 12.2.3 through 12.2.14. Breach Craneware confirms customer and employee data exposed in security incident SC Staff July 20, 2026 The breach, which occurred on July 20, saw a significant volume of file names viewed and exfiltrated by unauthorized individuals. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector You can skip this ad in 5 seconds