Newegg was exposing Credit Card info for a month.
Some persistent XSS was detected on the checkout page skimming credit card info and sending it to a third party server.
https://www.theverge.com/2018/9/19/17879630/newegg-user-credit-card-info-data-breach-hack