Under the UK's data protection laws, companies have 72 hours to tell individuals if they have suffered a data breach involving the loss of sensitive personal data, such as payment card details.
The code intercepted customer information and sent it to a domain that the criminals had registered to look as if it belonged to the company.
We have summarized this news so that you can read it quickly. If you are interested in the news, you can read the full text here. Read more: