Pro Wrestling Tees prowrestlingtees.com Pro Wrestling Tees data breach: what happened and what to do
Pro Wrestling Tees notified customers in December 2021 that malware had stolen payment card details at checkout. Names, card numbers and security codes were taken. The Maine Attorney General filing put the count at 31,000 customers.
View all 13,177 breaches- Breach date
- Apr 2021
- Made public
- 15 Dec 2021
- Affected
- 31,000
- Data exposed
- Names, Credit cards
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Pro Wrestling Tees, an online wrestling merchandise store, said law enforcement alerted it on November 1, 2021 that some customers' card numbers had turned up in criminal hands. A forensic vendor found malware and removed it. The company began sending notices on December 15, 2021.
Reporting by Fightful says the breach itself began on April 1, 2021, and that the company explained the long gap by saying it was part of an active federal investigation. The Maine Attorney General filing put the count at 31,000 customers. The California and Washington attorney general lists also carry the notice; Washington's count covers that state's residents only.
Sources checked: bleepingcomputer.com, fightful.com, atg.wa.gov
Last verified against the official page:
What was exposed
BleepingComputer reported that the malware stole full names and card numbers along with the matching security codes (CVV). The company said it found no evidence that other personal information was compromised.
What it means for you
Card numbers with security codes are enough to make online purchases, so the risk is fraudulent charges, not identity theft. Some customers on Reddit said they'd seen charges on their cards. Anyone whose card was used on the site between spring and late 2021 could have been affected.
The company's response
The company offered 12 months of identity protection, told customers to monitor their statements closely, and said it had added security measures.
What to do if you were in it
- 1
Ask your card issuer about the card you used
Call the number on the back of the card, say the card may have been exposed in a merchant breach, and ask for a replacement. The FTC says you can dispute unauthorized charges with your card issuer.
- 2
Check statements for the period
Look through your statements from spring to late 2021 for charges you don't recognize, and report any right away.
- 3
Expect messages that mention the breach
Mail, calls and texts that quote real details, such as your provider's name, are a common follow-up to a breach. Don't click links or give out information on an unsolicited call. Contact the organization using a number from its official site.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details appear. It can't remove data that has already leaked, so the steps above still matter.
Official filings
- Washington Attorney General , filed 22 Dec 2021 : 581 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the Pro Wrestling Tees breach?
If you got a notice letter, yes. If you ordered from the site in 2021 and didn't, check your card statements and ask the company.
What was exposed?
Names, card numbers and security codes, per BleepingComputer's reading of the notice. The company said it found no evidence other personal data was affected.
Should I change my password?
The reported data was payment card details, not passwords. Replace the card first.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
