Back Securityaffairs.Co

7,500+ Magento sites defaced in global hacking campaign

Securityaffairs.Co •Pierluigi Paganini • March 20, 2026

Hackers defaced 7,500 Magento sites since Feb 27, uploading files across 15,000 hostnames, mostly opportunistic attacks. Since February 27, a large-scale campaign has defaced over 7,500 Magento sites, targeting e-commerce platforms, global brands, and government services. According to cybersecurity firm Netcraft, attackers placed plaintext defacement files across more than 15,000 hostnames, directly compromising affected infrastructure. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Global Hacking Campaign Defaces 7,500+ Magento Sites Since February 27, 2026, hackers have defaced over 7,500 Magento-powered websites, targeting e-commerce platforms, government services, and various organizations. The attackers uploaded plaintext defacement files and hidden malicious files into publicly accessible directories across more than 15,000 hostnames. The campaign has impacted commercial brands, government agencies, universities, and non-profit organizations across multiple countries. Cybersecurity firm Netcraft reported the attacks as opportunistic, indicating a lack of sophisticated targeting. The full scope of the data theft and potential vulnerabilities exploited remains unclear. As of March 20, 2026, the attacks are ongoing, with no specific remediation steps detailed in the articles. The incident highlights the vulnerabilities within Magento platforms and the need for enhanced security measures. 2 sources 52

Extracted Entities

7,500+ Magento sites defaced in global hacking campaign

The full story

Extracted Entities

Attack Types (1)

Industries (1)

Platforms (1)