Skip to main content

See Tickets discloses data breach, customers’ credit card data exposed

  • October 26, 2022
  • 5 replies
  • 22 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54

October 26, 2022  By Pierluigi Paganini

 

International ticketing services company See Tickets disclosed a data breach that exposed customers’ payment card details.

Ticketing service company See Tickets disclosed a data breach, and threat actors might have accessed customers’ payment card details.

Threat actors were able to steal payment card data by implanting a software skimmer on its website.

The company discovered the security breach in April 2021 and immediately launched an investigation with the help of a forensics firm. The company completely eradicated the malware from its website on January 8, 2022.

 

>> Full Article <<

5 replies

tmcmullen
Popular Voice
Forum|alt.badge.img+6
  • Popular Voice
  • October 27, 2022

Wow, it took them about 9 months to eradicate the malware. That’s a long time. I wonder if they were still stealing customer payment information all that time. 


Jamesharris85
New Voice
Forum|alt.badge.img+4

9 months to “eradicate it” but “According to the company, the attackers obtained data provided by the customers while purchasing event tickets on the See Tickets website between June 25, 2019, and January 8, 2022” so from start to finish 2 and a half years of financial data being pinched 😯


MajorHavoc
Bronze VIP
Forum|alt.badge.img+25
  • Bronze VIP
  • October 28, 2022

Would someone please explain why any of these companies needs to keep credit card info on file? I really think this should be made illegal. 

But I will again recommend you find a credit card company that offers one time use cards, or like the card I use from Capital One, the card is only good at the single merchant. So they can steal it, but it is not good anywhere else. And the first time they try and use it at the wrong merchant, I get notified and can turn it off. 


Martin.1
Popular Voice
Forum|alt.badge.img+4
  • Popular Voice
  • October 28, 2022

That is a seriously long time to remedy the breach. Especially when you know you have customers card details on hand. Ludacris. @MajorHavoc  I cannot agree more with you. Why should they keep your detail on hand? There is absolutely no reason for this. It is one of the reasons I hardly ever do any online purchases. 


Jamesharris85
New Voice
Forum|alt.badge.img+4

I don’t know the reasons as to WHY they need to keep the information, but what is strange here is that in order to be legally compliant (certainly in the UK) you have to ensure that you only store certain data and only if it is encrypted. More info here: The Do's & Don'ts of Storing Credit Card Information Safely - Chargebee Compass