ADVERTISEMENT

Business

No customer payment information compromised after breach, Indigo says

Published: 

CTV National News: Indigo refuses to pay ransom Heather Wright reports on bookseller Indigo refusing to pay a ransom to hackers who accessed employee data three weeks ago.

Indigo says customer credit card and debit card information has not been compromised, six days after a cybersecurity breach that took its website and payment systems offline.

"Customer credit and debit card information was not compromised by our recent cybersecurity incident. We do not store full credit or debit card numbers in our systems," the retailer said in a statement posted to social media and its website Tuesday afternoon.

The company's loyalty points, known as plum points, also remain intact and unaffected by the cybersecurity incident, Indigo said.

Indigo, which owns Coles and Chapters, had announced it had been hit with a cybersecurity incident last Friday and said it was working with third-party experts to investigate the breach.

The retailer also announced that it is once again accepting credit, debit and gift card payments in store after only taking cash for the past week.

However, in-store returns and exchanges continue to be unavailable. Indigo's online store also remains offline.