The Oregon Zoo in Portland, OR, one of the state's top tourist attractions, has announced a data breach that may have exposed the payment card information of more than 117,000 visitors. The zoo discovered suspicious activity within its online ticketing service on 26 June 2024, as stated in a notice sent to affected individuals. An investigation subsequently determined that an unauthorized actor had been redirecting customer transactions from the third-party vendor processing online ticket purchases since 23 December 2023.
The investigation found that this redirection potentially allowed the attacker to obtain sensitive payment card data, including names, card numbers, CVV codes, and expiration dates, for all customers who made online purchases during the six months from 20 December 2023 to 26 June 2024. "Maintaining the confidentiality, privacy, and security of customers' information is our priority," the zoo stated in its notice. "Our response to this event included initiating an investigation and notifying federal law enforcement."
To combat the breach, the zoo has decommissioned its previous online ticketing site and built a new secure platform for future transactions. It is also offering 12 months of complimentary credit monitoring and identity protection services through Cyberscout for all affected individuals.
Visitors who made online purchases at the Oregon Zoo during the impacted timeframe are advised to closely monitor their financial accounts, be cautious of any suspicious communications, and consider requesting replacement payment cards from their financial institutions.
The Oregon Zoo breach is the latest in a growing number of high-profile cyberattacks targeting the financial data of consumers. Experts emphasize that organizations must remain proactive in securing their digital assets to protect their customers from the risks of payment card fraud and identity theft.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. For questions, comments or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www. redskyalliance. org/
- Website: https://www. redskyalliance. com/
- LinkedIn: https://www. linkedin. com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://attendee.gotowebinar.com/register/5504229295967742989
Comments