If you’ve bought something on GameStop’s website, your credit card and customer data may have been hacked, according to reports on KrebsOnSecurity, a blog written by former Washington Post reporter Brian Krebs.

"Two sources in the financial industry told KrebsOnSecurity that they have received alerts from a credit card processor stating that Gamestop.com was likely compromised by intruders between mid-September 2016 and the first week of February 2017," wrote Krebs, saying he also received confirmation from the company. Krebs says GameStop sent him the following statement:

“GameStop recently received notification from a third party that it believed payment card data from cards used on the GameStop.com website was being offered for sale on a website. That day a leading security firm was engaged to investigate these claims. Gamestop has and will continue to work non-stop to address this report and take appropriate measures to eradicate any issue that may be identified.”

GameSpot has reached out to GameStop for a statement, and we’ll update you as soon as we know more.

Source: GameSpot