# Convertr removes payment skimmer from shared checkout analytics script

_Published Tuesday, October 27, 2026 at 5:32 PM EDT · Security, Products · Latest · Tier 2 — Notable_

![Convertr removes payment skimmer from shared checkout analytics script — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/27/cart.jpg)

Convertr has removed a payment-card skimmer from a shared analytics script and upgraded its Plausible installation to a patched version, security firm Sansec confirmed Tuesday. The compromised script loaded on checkout pages across merchants using the Brazilian e-commerce platform and was configured to steal card details, cardholder names and CPF taxpayer identification numbers.

Sansec says attackers modified a tracker hosted on Convertr's infrastructure. It suspects an unauthenticated command-execution vulnerability provided access, but that route is unconfirmed. Convertr said it was notifying affected merchants and payment providers. Browser caching could keep the malicious script active for up to 24 hours after cleanup, Sansec warned.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data/)

---
Canonical: https://techandbusiness.org/newswire/YjBMz2zBS4WPrykgmkTy3f
Published: 2026-10-27T21:32:20.470Z
Story chronology: 2026-10-27T20:57:25.000Z
Retrieved: 2026-10-28T00:21:27.683Z
Publisher: Tech & Business (techandbusiness.org)