See Tickets suffers another major data breach

Image by Tumisu from Pixabay

See Tickets has disclosed a data breach that has compromised customers’ credit card information for the second time in the past year.

The Vivendi Ticketing-owned global ticketing company confirmed a breach impacting more than 300,000 customers in a filing with the authorities in the US state of Maine.

The breach impacted a total of 323,498 customers who completed transactions between February and July 2023, with See Tickets only becoming aware of “unusual activity” on its platforms in May.

Following an investigation by an unnamed cybersecurity firm, it was determined that hackers had inserted malicious code into several of the company’s e-commerce checkout pages. See Tickets said data accessed included names, addresses and payment card details.

In a note to customers, See Tickets offered an apology and said there was no evidence their details had been fraudulently used. It told customers to be vigilant and offered them 12 months of complementary identity monitoring and identity restoration services.

Diligent investigation

See Tickets said: “Please know that protecting your personal information is something we take very seriously. We conducted a diligent investigation to confirm the nature and scope of the compromise. We also took steps to reduce the likelihood of a similar incident occurring in the future, and we continue to make additional improvements that strengthen our cybersecurity protections.”

The announcement comes after See Tickets notified customers in October 2022 of a breach that impacted customers between June 2019 and January 2022. Hackers accessed customers’ name, address, zip code (post code), payment card number, card expiration date and CVV number.