Hackers planted Magecart-style malicious code on sites which went undetected for months. Blender maker NutriBullet and guitar tuition website Truefire fell foul of Magecart attacks. Sensitive data related to guitar-playing pupils and their payment cards continued to be skimmed as it was entered onto the compromised website for a further four days. Truefire customers are only receiving a letter notifying them of the security breach now. Security researchers at RiskIQ say the attacks continue to successfully steal users’ sensitive and easily-monetised data.”]
Source: https://businessinsights.bitdefender.com/business-websites-hit-credit-card-skimming-malware