Cricut Informational Website

 

Cricut has learned that the checkout page on a prior version of its website was the subject of a cyberattack, which was designed to scrape payment and personal information of customers at checkout while making purchases. Customers who shopped or entered data at checkout on shop.cricut.com from May 27 through July 12, 2017, may have had their data compromised. The malware attack occurred only at checkout on Cricut.com, and it did not affect consumers purchasing on Design Space, on mobile phone apps or our Cricut Access customers.

Importantly, Cricut does not have direct evidence that anyone’s credit was harmed or that any fraud occurred by this attack; however, the Company knows that this attack happened. Cricut understands the gravity of the situation, and it sincerely apologizes for any inconvenience or concern this incident may have caused you or any of its customers. At Cricut, our customers’ trust is very important to us, and we want to assure you that we take this situation seriously.

The Company took immediate action to understand the attack and protect customer information. Cybersecurity investigators determined that Cricut’s online checkout page was infected with malicious code, or “malware.” This malware was designed to allow unauthorized parties to steal customer payment and contact information, including the payment card number, security code, expiration date, names, addresses and contact information.

Cricut is vigilant about ensuring that its website is a safe, secure environment for conducting commerce. Cricut conducted a full analysis with the assistance of third-party forensic experts, and the malware involved in this unlawful computer intrusion has been removed from all of its systems. The Company relaunched new shopping pages with enhanced security.

With the forensic analysis concluded, Cricut is communicating with customers in an abundance of caution so that any customers who may have been affected can take the appropriate measures to protect themselves.


As a result of this incident and at no cost to you, Cricut is offering MyIDCare identity theft protection services through ID Experts to provide you with credit monitoring and complete recovery services. MyIDCare product helps protect your identity with: 

check_mark_small Credit monitoring that alerts you to any changes to your credit report

check_mark_small Access to Fraud Resolution Representatives to resolve any identity theft issues

check_mark_small Exclusive educational materials on protecting your identity including instructive articles, up-to-date information on new identity theft scams and tips for protecting yourself

check_mark_small Identity theft insurance coverage for up to $1,000,000

Use the enrollment code in your notification letter to begin the enrollment process.

Enroll Now!



The above link will redirect you to our secure enrollment site.

 

seal