Payment provider data breach exposes credit card information of 1.7 million customers

Slim CD, a Florida-based payment gateway, disclosed that attackers maintained access to its environment from August 17, 2023 to June 15, 2024 and briefly accessed full credit card data and PII (names, addresses, card numbers and expiration dates) between June 14–15, 2024, potentially impacting approximately 1.69 million people; Slim CD reports no evidence of fraud so far and advises victims to monitor statements, change passwords, enable 2FA, and consider identity monitoring.