Wacom says crooks probably swiped customer credit cards from its online checkout

Graphics tablet maker Wacom has warned customers their credit card details may well have been stolen by miscreants while they were buying stuff from its website. We're told people's payment information was likely pilfered from the biz's online store between the end of November and early January, and that if you get a message from Wacom about this then consider yourself affected. If not, don't worry about it for now. "While we are still investigating," the Japan-based manufacturer told punters in an email seen by The Register today, "we believe it may have occurred between November 28, 2024 and January 8, 2025. "The issue that contributed to the incident has been addressed and is effectively being investigated. However, we are now writing only to customers who might have been potentially affected by this." If you are one of the unlucky ones to get the mail, the digital art equipment slinger suggests the following: The wording of the message suggests Wacom is aware of how the payment information was stolen, and has closed up whatever security weakness was involved. To us, it sounds as though someone was able to infect the maker's website with malicious code that skimmed people's card details and other info in real-time as they paid for things, and that this code exfiltrated that sensitive data to fraudsters to exploit. There are other possibilities, such as Wacom logging sensitive payment info in a way that allowed miscreants to snatch it, but our money is on a payment page ski...