HACKERS accessed payment accounts of two Russian fundraising projects, 'Davayte' and 'You Are Not Alone', which support Ukrainians and political prisoners, respectively. The breach exposed donor email addresses and some payment card details. The attacks occurred in mid-August through a vulnerability in the integration between payment processor Stripe and WooCommerce used by both projects.
Statements from the projects confirmed that some donor email addresses, along with the last four digits of their payment cards and bank information, were compromised.