GameStop Investigates Breach of Customer Payment DataThe company is investigating a report that data for payment cards used at Gamestop.com has shown up for sale online.

Hackers appear to have compromised the online payment platform of video game retailer GameStop, with the companyannouncingon Friday that it is investigating reports of data from payment cards used atGameStop.comshowing up for sale online.

GameStop offered few details about the timing of the breach or how many customers it could potentially affect, but said that it is working with a security firm to investigate. Citing sources in the financial industry, security expert Brian Krebs said on Friday that the GameStop website was likely compromised by "intruders" between last September and the first week of February.

In ablog post, Krebs wrote that "the compromised data is thought to include customer card number, expiration date, name, address and card verification value (CVV2), usually a three-digit security code printed on the backs of credit cards." He noted that CVV2 codes are not typically stored by online payment processors, suggesting that the hackers were able to capture them before they were submitted to verify a payment.

"GameStop has and will continue to work non-stop to address this report and take appropriate measures to eradicate any issue that may be identified," the company said in a statement, and reminded customers that credit and debit card agreements typically limit cardholders' liability for unauthorized charges if they report them promptly.

Many breaches of online payment information have been reported in recent years, from tech firms like Acer, toMadison Square Garden,hotel chainsand theCalifornia Department of Motor Vehicles. In Acer's case, the companyagreed to pay$115,000 in penalties after an investigation by the New York Attorney General's office revealed that sensitive customer information was unencrypted and easily accessible to unauthorized users.