Theft of customer info from Garmin SA

[Albatross]

Received the following email from Garmin SA yesterday.

 

 

Sept. 12, 2019

 

Dear Garmin Customer,

 

We recently discovered theft of customer data from orders placed through shop.garmin.co.za (operated by Garmin South Africa) that compromised your personal data related to an order that you placed through the website. The compromised data was limited to only Garmin’s South Africa site, and contained payment information, including the number, expiration date and CVV code for your payment card, along with your first and last name, physical address, phone number and email address.

 

We recommend that you review and monitor your payment card records to make sure there were no unauthorized purchases. If you suspect any fraud, please contact your bank or payment card provider for further direction.

 

As a valued customer, we apologize for this incident and assure you that Garmin takes our obligation to safeguard personal data very seriously. For further questions, please contact us at productsupport.privacy@garmin.com.

 

Sincerely,

Jennifer Van Niekerk, South Africa Managing Director

 

I purchased a Garmin charger recently from the online store and on Friday evening there was fraudulent activity on my credit card. Fortunately I picked it up early and immediately had the card cancelled. Be careful if you've recently transacted with Garmin SA.

[Help.Me.]

Good grief what next??

[mecheng89]

O my soul. 

[Steven Knoetze (sk27)]

We recommend that you review and monitor your payment card records to make sure there were no unauthorized purchases. If you suspect any fraud, please contact your bank or payment card provider for further direction.

 

Loved this part, basically taking no responsibility.

Just a heads up.......

[andreas17777]

I see their site is in maintenance, what payment system were they using?

[fanievb]

thanks for the headsup

[Mokgaga'a mmakubela!]

Was on MyBB yesterday. This is not gonna end well to those affected. Good luck ????. The big question is why did Garmin keep this data? Why?

 

https://mybroadband.co.za/news/security/319869-garmin-south-africa-hack-credit-card-details-stolen.html

[Riamich]

Question how can they keep your card details. Garmin now want to take no responsibility. Not going to end very well for them.

[scotty]

Highlighted I can understand but the rest there is no reason to retain. 

 

• Payment card number
• Payment card expiration date
• Payment card CVV number
• First name
• Last name
• Physical address
• Phone number
• Email address

[Long Wheel Base]

I see their site is in maintenance, what payment system were they using?

The same one the okes working on oil rigs use.

[Abercrombie]

I received this email as well, this is totally unacceptable. Nothing short of gross incompetence and mismanagement. 

What doesn't help is that I'm unfortunately with Nedbank who are sadly lacking in effective security measures.

As mentioned, Garmin quickly absolving themselves of any responsibility .

[RocknRolla]

I feel sorry for the sucker that gets my account deets.

[Matt]

I cancelled a card a week or so ago after an attempted fraudulent Uber charge... same card that was used for a Garmin SA purchase a few months ago. 

[JScottP]

Would this then effect you if you have loaded your cards for Garmin Pay???

[tinmug]

Who the * stores customer and credit card details – ALL the details – in an unencrypted form? That is gross negligence. 

 

(Well, Garmin does).

[Eldron]

"We take our obligation to safeguard personal data very seriously" apart from when they shouldn't keep it and can't protect it.