PHP Vulnerability Responses by Company

GameStop, Inc.

Companies / web services
Aliases / services
GameStop / ゲームストップ / GameStop, Inc.
Official website
https://www.gamestop.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

affected GameStop.com order payments

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Names, addresses, card numbers, expiration dates and CVVs for orders or attempted orders during August 10, 2016–February 9, 2017 may have been obtained. The investigation found no evidence of unauthorized access but identified a potential exposure.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review financial statements and credit reports and promptly report unauthorized charges to your financial institution. The notice concerns website orders in the specified period.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/ecrime/databreach/reports/sb24-72388Service and operation documentation
  2. 2017-06-02 official noticehttps://oag.ca.gov/system/files/CA_1.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies GameStop, Inc. and the relevant scope.
  2. 2017-06-02 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments