Magecart card skimming code was added to payment checkout and wallet page. Magecart is known for digital credit card theft. This unauthorized code was stealing sensitive information such as card details, cvv, motnh of expiration etc. It is the digital form of a card skimmer which otherwise affects a POC. In this kind, one may insert malicious code on pages that take card information for online payments. This information later may directly be misused by the attacker or post selling in the black market. An anonymous investigator in this case reported an error log file was tampered to include malicious code. It is almost impossible for a customer to understand  this kind of threat, the retailers have to maintain strict testing and security standards to prevent it.

Macy’s informed the federal law enforcement, had a forensic firm do a thorough investigation, notified the affected customers, notified the card companies whose customers were involved. They have also arranged to provide identity protection services free of cost for a year