Collaborate Disseminate
At the end of June, online ticket company Ticketmaster confirmed that Inbenta, a third-party website supplier, suffered a security incident. However, researchers now reveal it was more complicated than it appeared, and definitely not a one-time attack,… Continue reading Ticketmaster falls victim to worldwide digital card skimming attack
A payment data breach disclosed by Ticketmaster UK last month was just one effort amid a much wider skimming campaign, according to a report released Tuesday by cybersecurity company RiskIQ. Ticketmaster UK said that it was breached via Inbenta, a third-party customer service chat application it used on its website. According to RiskIQ, the breach was the work of Magecart, a threat group that seeks out insecure code on e-commerce website. The group then modifies or replaces the code in order to steal customers’ payment information. Ticketmaster’s and Inbenta’s initial accounts of the breach differed slightly. The ticketing giant stressed that the compromise happened via a tool provided by Inbenta. While Inbenta acknowledged that the JavaScript code provided to Ticketmaster was the source of the breach, Inbenta claimed the breach occurred because the ticketing company applied the code to its payments page without notifying Inbenta. However, RiskIQ says it observed instances where the Inbenta […]
The post Report suggests Ticketmaster breach was broader than initial disclosure appeared first on Cyberscoop.
Continue reading Report suggests Ticketmaster breach was broader than initial disclosure
Name, address, email address, telephone number, payment details and Ticketmaster login details were potentially compromised for tens of thousands of customers. Continue reading Ticketmaster Chat Feature Leads to Credit-Card Breach