- RansomHouse hit Vivaticket through subsidiary Irec SAS
- Customer data stolen, including names and reservation details
- Attack disrupted ticketing for museums and venues across Europe
International ticketing platform Vivaticket was recently hit with a ransomware attack which affected a number of top museums, theaters, and other similar venues.
In a new entry on their data leak website, a group going by RansomHouse said it struck Vivaticket through its subsidiary, Irec SAS, and accused this company of trying to sweep the whole thing under the rug.
“We strongly recommend that you contact us to prevent your confidential data and project documents from being disclosed,” the hackers apparently said.
Assessing the impact
The crooks said that in the attack, they stole customer data including people’s full names, email addresses, purchase history and reservation details, country of residence and postal codes, and account metadata and login timestamps.
This may not seem like much, but for cybercriminals it’s more than enough to launch convincing phishing attacks and steal login credentials or deploy malware on people’s computers.
We don’t know exactly how many people are affected by the attack, but they could be in the millions. Vivaticket works across 50 countries, handles ticketing for some of the world’s most popular museums, such as the Louvre, and manages approximately 850 million tickets on a yearly basis.
There is no notice of the incident on Vivaticket’s website, and its newsroom site is currently offline.
Citing the French Ministry of Culture, Cybernews says the financial impact of the attack is currently being assessed. Financial data, such as banking information or credit cards, were most likely not accessed.
The French National Cyber Security Directorate (ANSSI) and other law enforcement agencies have been brought in, and are currently assessing the scope of the attack, as well as the damages.
However, the breach is affecting the industry, as apparently many museums can’t access secure online ticketing, and some European venues had to shut down their booking systems entirely.
Via Cybernews
