The California Office of the Attorney General disclosed a data breach affecting Wolff-St, LLC (operating as Marmi) in March 2022. The incident stemmed from unauthorized malicious code injected into the marmishoes.com e-commerce website between August 29, 2021, and January 31, 2022. The breach specifically targeted customer payment card information, though the exact number of impacted individuals remains undisclosed. The compromise likely occurred via a web skimming (Magecart-style) attack, where threat actors intercepted payment details entered during checkout. While no broader personal data (e.g., names, addresses) was confirmed as exposed, the focus on financial data suggests a direct risk of fraudulent transactions for affected customers. The breach underscores vulnerabilities in third-party payment processing integrations, a common vector for cybercriminals exploiting e-commerce platforms. No ransomware or employee data was involved, and the attack’s scope appears limited to payment card theft during the specified window.