Convertr's analytics script skimmed cards across shared checkouts
Sansec reports a shared tracker stole card details and Brazilian taxpayer IDs. Convertr removed it, but cached copies can outlast cleanup and the suspected entry point remains unconfirmed.