1.7M potentially pwned after payment services provider takes a year to notice break-in

Slim CD, a Florida payment processor, discovered an intrusion that began on August 17, 2023 and notified roughly 1.693 million customers that their credit card numbers, expiry dates and possibly names and addresses may have been accessed; the breach was identified around June 14–15, 2024. The company engaged third-party investigators, reported the incident to law enforcement, and is offering affected individuals guidance (e.g., free credit reports); no misuse of the data has been detected to date.