SCUF Gaming International

SCUF Gaming International, also known simply as SCUF Gaming, is a company headquartered in the United States of America. The firm operates an online store through which it sells its products to customers. It is recognized by its aliases SCUF Gaming International and SCUF Gaming. Its headquarters are located in the United States. The company conducts direct‑to‑consumer sales via its web‑based storefront.

In February 2021, SCUF Gaming International experienced a web skimming attack in which threat actors compromised its online store using third‑party vendor credentials and injected malicious scripts to harvest customers’ credit card details, including names, numbers, expiration dates, CVVs, email addresses, and billing information. The incident affected over 32,000 individuals, although transactions processed through PayPal were reported to be unaffected. Following the skimming breach, the company disclosed a separate security issue involving an exposed internal development database that contained personal and payment records of more than 1.1 million customers. Unusual activity alerts from its payment processor prompted an investigation that led to the removal of the malicious skimmer from the site. After the skimmer was eliminated, SCUF Gaming advised affected customers to monitor their financial accounts for any signs of fraudulent activity. The company publicly disclosed both incidents, providing details about the scope of the data exposure and the steps taken to secure its systems.