The websites for U.S. based jewelry and accessory giant Claire’s, and its subsidiary Icing, were compromised in April and may have allowed hackers to gain access to customer’s credit cards. Claire’s website was compromised by attackers who attempted to steal customer’s payment information when purchasing from the site. The attack is called a MageCart attack and consists of hackers compromising a web site so that they can inject malicious JavaScript scripts into various sections of the web site. These scripts then steal payment information that is submitted by a customer.
Source: https://www.bleepingcomputer.com/news/security/accessories-giant-claires-hacked-to-steal-credit-card-info/