Supply chain attacks can compromise websites that load in third-party services such as ads and live chat support from remote servers, creating vulnerabilities for sensitive information including name, credit card number, expiration date, and the security code.