Security Vulnerabilities Result in Hack of 2,000 Magento Stores

Recently, cybersecurity researchers revealed that there had been a Magento hack impacting almost 2,000 websites. According to Sanguine Security (SanSec), a Dutch cyber-security firm, this hack infected 1,904 stores over a three-day period beginning on Sept. 11^th.

Most of the stores impacted were running the End of Life (EOL) version of Magento (1.9.x). Following Adobe’s purchase of Magento, Adobe stopped supplying security updates for Magento 1.x software in late June 2020. Adobe first notified Magento customers of the planned sunsetting of Magento 1 in Nov. 2019. At that time, it also urged them to upgrade to Magento 2.x to continue receiving support, including security upgrades, from Adobe.

Cybersecurity experts were not surprised by the hack, noting that Magento 1.9.x had known security vulnerabilities.

The hack involved a typical Magecart scheme in which hackers planted malicious scripts inside the stores’ source code that logged payment card details entered into checkout forms.

For online merchants involved in the Magento hack, the damage has already been done. But for those webstores using Magento 1.9.x who were not hacked, the question now becomes how they can best protect their customers’ financial data.

All online retailers have always faced security concerns, and it is their job to ensure that their websites are secure. Fortunately, there are some simple steps retailers can take to keep their websites and their customers safe.

Upgrading Your Magento Webstore

One of the most important steps businesses can take to safeguard their Magento webstore is to make sure that they migrate to Magento 2.x. Website migration is costly, but in the long run, it is far less costly than continuing to rely on outdated software with known security vulnerabilities.

While software that is no longer supported by the manufacturer is still useable, it is not optimized for business success. Don’t know how to migrate from Magento 1.9.x to Magento 2.x on your own? No problem. That’s where trusted business technology partners like CertiPro come in.

Our team of Sage-and Magento-certified consultants can walk your company through the process of migrating your website and can handle the process of transferring your data and even designing your new Magento site.

About Us

CertiPro is a trusted business technology partner. We provide businesses with technology solutions to their business problems, including Enterprise Resource Planning (ERP) software, web design, and more. Contact us to learn how CertiPro can help with your Magento webstore.