Presumably an organization as big and intricate as the Packers has an annual cyber security budget totaling in the millions. (Reporting an annual revenue of over $650 million most recently).
That being said, the organization is disclosing that for a period of 10 days between September and October of 2024 their e-commerce site "packersproshop.com" was compromised with malicious code and consumer credit cards may have been exposed/stolen.
I appreciate stories like this because they help to illustrate several simple points:
1. Big or small any entity can be targeted and breached
2. Even the big guys need help (Packers called in outside support)
3. Regular reviews of security are important to prevent issues from turning into emergencies. (I cannot comment on audit rhythm for the Packers but it stands to reason that an solid auditor would have identified this problem/vulnerability) and to be fair maybe they did.
Just a simple reminder today folks to slow down in 2025 and take a careful look at your business and personal security posture. Yes it cost money to move the needle, but 9 times out of 10 it will cost less than the fallout/cleanup.
