Sixth June

Sixth June operates as a French fashion e‑commerce company that runs an online retail platform for clothing and accessories. The organisation’s headquarters are located in France. Its core business involves presenting product catalogues, enabling customers to browse items, and completing purchases through a web‑based checkout system. The site provides typical e‑commerce functionalities such as size selection, cart management, and payment processing. By focusing on fashion goods, Sixth June serves shoppers looking for apparel and related products via its digital storefront.

On 23 October 2019, Sixth June’s fashion e‑commerce site was compromised by a MageCart‑style e‑skimmer that injected malicious JavaScript into the checkout page. The skimmer, hosted on a domain made to resemble Magento, captured payment card details including numbers, expiration dates, CVV codes, and cardholder names, as well as personal data such as addresses, email addresses and passwords. Researchers discovered the intrusion after nearly a week of unauthorized data collection, noting that the attackers concealed the activity using counterfeit Google Tag Manager code. Despite multiple alerts sent to the company’s leadership, the malicious script remained active for several days before it was finally removed. This event was part of a wider campaign that affected more than eighty websites employing similar skimming infrastructure.