LaCie USA recently began notifying an undisclosed number of customers that their personal information may have been exposed when an unauthorized person used malware to access transaction data from LaCie's Web site.
The FBI notified the company of the intrusion on March 19, 2014.
"We have hired a leading forensic investigation firm, who is conducting a thorough investigation, and assisting us in implementing additional security measures," Philippe Spruch, chairman of the board and general manager of LaCie, wrote in the notification letter [PDF]. "Based on the investigation, we believe that transactions made between March 27, 2013 and March 10, 2014 were affected."
The information potentially exposed includes customer names, addresses, e-mail addresses, payment card numbers and payment card expiration dates, along with user names and passwords.
While no credit protection services are being offered to those affected, all affected customers are being advised to review their financial statements and credit reports for any unauthorized activity.
"We regret any inconvenience this may have caused you," Spruch wrote. "To prevent this from happening again, we are working with the forensic firm to implement additional security measures."