Hackers hijacked Convertr analytics script to steal payment card data

A credit card skimming group reportedly compromised a shared Plausible analytics script hosted on infrastructure managed by Convertr. The script loaded on checkout pages for merchants using the platform and was used to steal shoppers’ payment data.