Wacom Notifies E-Shop Customers of Credit Card Data Exposure

Graphics tablet maker Wacom has disclosed a potential data breach affecting customers who made purchases through its official online store. In a notification letter sent to impacted users, the company revealed that credit card details may have been exposed between November 28, 2024, and January 8, 2025. The incident is still under investigation, but Wacom assures customers that the underlying issue has been addressed.

While Wacom has not publicly detailed the exact cause of the breach, the nature of the incident suggests the possible involvement of card skimmers — malicious scripts that cybercriminals inject into e-commerce sites to steal payment card data in real-time.

These skimmers, often referred to as Magecart attacks, capture sensitive information such as cardholder names, numbers, expiration dates, and CVV codes when users enter them at checkout. Similar tactics have been recently used in attacks targeting major online retailers such as See Tickets, ZAGG, Ray-Ban, National Geographic, Cisco, Whirlpool, and Segway.

Wacom is a leading manufacturer of digital drawing tablets, widely used by professional artists, designers, and creative industries worldwide. Given its popularity and the extensive dwell time for the skimmer, the number of affected customers could be significant, though the company has not provided an estimate. The breach notification letter, published by cybersecurity researcher Troy Hunt on X, was sent only to customers who might have been impacted. At the time of writing, no official statement has been released quantifying the scope of the exposure.

Customers who made purchases through Wacom's official e-store during the specified timeframe are urged to take precautionary measures to protect their financial information. Wacom recommends that affected users:

• Monitor credit card statements for any unauthorized transactions.
• Immediately contact their card issuer if they detect suspicious charges.
• Consider placing a fraud alert on their credit file to prevent potential misuse.

The company emphasizes its commitment to data security and has pledged to provide further updates as the investigation progresses. Concerned customers can reach Wacom's support team at privacy-wsp@wacom.com for more information.

In general, when buying from online shops, customers are advised to use virtual cards, enable transaction alerts, and consider digital payment alternatives like PayPal or Apple Pay, which offer better protection from data theft and account hijack and can revoke fraudulent charges more easily.