CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

Magecart: The Web Skimming Threat Behind PCI DSS Changes

June 25, 2026

Magecart is a collective of cybercriminal groups that specialize in web skimming attacks, injecting malicious scripts into e-commerce checkout pages to steal payment card data. Sansec has documented over 100,000 sites compromised by such attacks, with the 2018 British Airways breach exposing 380,000 transactions. The group often compromises third-party vendors to inject skimmers into scripts already trusted by merchants.