GameStop.com website suffered from a data breach incident in February 2017.
The compromised information includes customer card number, expiration date, name, address and card verification value (CVV2), usually a 3-digit security code printed on the backs of credit cards.
They immediately reported the incident to the bank that issued the card because payment card network rules generally state that cardholders were not responsible for unauthorized charges.
Source: https://krebsonsecurity.com/2017/04/gamestop-com-investigating-possible-breach/
"id": "GAM11312922",
"linkid": "gamestop",
"type": "Breach",
"date": "02/2017",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"