Payment gateway provider Slim CD disclosed that attackers had access to its systems from 17 August 2023, with credit card data specifically accessed 14-15 June 2024 before discovery on 15 June 2024. Approximately 1.7 million individuals’ names, addresses, credit card numbers, and expiration dates were exposed (CVVs not compromised). Slim CD processes payments for US and Canadian merchants. Customers were not directly notified until September 2024.