BreachPublished 14 Nov 2025

Checkout.com Discloses Data Breach After Extortion Attempt

Source SecurityWeek

Description

The information was stolen from a legacy cloud file storage system, not from its payment processing platform. The post Checkout.com Discloses Data Breach After Extortion Attempt appeared first on SecurityWeek .

Impact

European organizations using Checkout.com services or similar legacy cloud storage solutions face moderate confidentiality risks due to potential exposure of sensitive data. Although the payment processing platform was not compromised, leaked data could include customer information, internal documents, or proprietary data, leading to reputational damage, regulatory scrutiny under GDPR, and potential financial losses from extortion or fraud. The breach may also increase phishing or social engineering risks targeting affected entities. Since the breach involves legacy cloud storage, organizations relying on outdated or poorly secured cloud infrastructure are at higher risk. The extortion attempt indicates threat actors are actively monetizing stolen data, which could lead to further attacks or data leaks if demands are unmet. Operational impact is limited as availability and integrity of payment services remain intact. However, the incident stresses the need for robust data governance and security controls across all storage platforms to prevent similar breaches.

Defensive guidance

1. Conduct a comprehensive audit of all legacy cloud storage systems to identify and remediate security gaps, including misconfigurations and outdated access controls. 2. Implement strict access management policies using the principle of least privilege and enforce multi-factor authentication for all cloud storage access. 3. Encrypt sensitive data at rest and in transit within cloud storage environments to reduce exposure risk in case of unauthorized access. 4. Monitor cloud storage access logs and network traffic for unusual activities indicative of data exfiltration or extortion attempts. 5. Develop and regularly update incident response plans that specifically address extortion scenarios following data breaches. 6. Educate employees and stakeholders about phishing and social engineering risks that may arise from leaked data. 7. Engage with cloud service providers to ensure security best practices and timely patching of legacy systems. 8. Review and update data retention policies to minimize sensitive data stored in legacy systems. 9. Coordinate with legal and compliance teams to ensure GDPR and other regulatory requirements are met in breach response and notification.

References

securityweek.com/checkout-com-discloses-data-breach-after-extortion-attempt/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 14 Nov 2025, 13:26 UTC

References

Community reviews