Ticketmaster falls victim to worldwide digital card skimming attack

At the end of June, online ticket company Ticketmaster confirmed that Inbenta, a third-party website supplier, suffered a security incident. However, researchers now reveal it was more complicated than it appeared, and definitely not a one-time attack,… Continue reading Ticketmaster falls victim to worldwide digital card skimming attack

Report suggests Ticketmaster breach was broader than initial disclosure

A payment data breach disclosed by Ticketmaster UK last month was just one effort amid a much wider skimming campaign, according to a report released Tuesday by cybersecurity company RiskIQ. Ticketmaster UK said that it was breached via Inbenta, a third-party customer service chat application it used on its website. According to RiskIQ, the breach was the work of Magecart, a threat group that seeks out insecure code on e-commerce website. The group then modifies or replaces the code in order to steal customers’ payment information. Ticketmaster’s and Inbenta’s initial accounts of the breach differed slightly.  The ticketing giant stressed that the compromise happened via a tool provided by Inbenta. While Inbenta acknowledged that the JavaScript code provided to Ticketmaster was the source of the breach, Inbenta claimed the breach occurred because the ticketing company applied the code to its payments page without notifying Inbenta. However, RiskIQ says it observed instances where the Inbenta […]

The post Report suggests Ticketmaster breach was broader than initial disclosure appeared first on Cyberscoop.

Continue reading Report suggests Ticketmaster breach was broader than initial disclosure

WPA3, Ticketmaster, and Don’t Wipe So Hard – Paul’s Security Weekly #566

Terrible passwords outlawed in Microsoft’s new Azure tool, Ticketmaster suffers security breach in personal and payment data, stop wiping your butt so hard, Toronto cops in big trouble for eating weed edibles, and WiFi’s tougher WPA3 securi… Continue reading WPA3, Ticketmaster, and Don’t Wipe So Hard – Paul’s Security Weekly #566

Major data breaches at Adidas, Ticketmaster pummel web users

There’s been a number of major data breaches and leaks revealed in the last few days, and we take a look at three of the biggest: Adidas, Ticketmaster, and marketing firm Exactis.
Categories:

Cybercrime
Privacy

Tags: adidasadvertisingbreachcard… Continue reading Major data breaches at Adidas, Ticketmaster pummel web users

Ticketmaster UK trades blame with chat app provider over payment data breach

Ticketmaster, the global entertainment ticketing service, suffered a breach that may have exposed the personal and payment information of people who used its United Kingdom website, the company publicly disclosed Wednesday. In its statement, Ticketmaster UK appears to lay blame on a third-party customer service chat application it used on its website. The company said that it identified malicious software one the application, made by Inbenta Technologies, that allowed attackers to access customers’ information. But Inbenta deflected blame back to Ticketmaster, saying that it deployed the chat app improperly. “As a result of Inbenta’s product running on Ticketmaster International websites, some of our customers’ personal or payment information may have been accessed by an unknown third-party,” Ticketmaster says in its notice. In a separate statement, Inbenta CEO Jordi Torras writes that while the breach came from a piece of JavaScript written by Inbenta for Ticketmaster, the ticketing company applied it to […]

The post Ticketmaster UK trades blame with chat app provider over payment data breach appeared first on Cyberscoop.

Continue reading Ticketmaster UK trades blame with chat app provider over payment data breach