|
|
Post by khiar on Sept 30, 2024 16:29:07 GMT
I received an email alert from the 'have I been pwned' service which monitors your email address for any security incidents, unfortunately Central Tickets customer data has been leaked: Unsalted hashes are not very secure so I am treating this as a leaked password - best to change your Central Tickets password and anywhere else you might have used that password. I have been getting more spam calls and emails lately, though I'm not sure if that's related  |
|
|
|
Post by matty on Sept 30, 2024 19:02:00 GMT
Email from Central Tickets CEO...
Good Evening,
We are aware of reports suggesting that we may have experienced a potential data breach and we are actively working to verify these claims.
Based on our current understanding, the potential breach could have affected basic personal information, such as names, mobile numbers, and email addresses of our members. Please be assured that we do not process or store any sensitive or high-risk data.
Hashed account passwords may also have been involved in the potential breach. However, these are encrypted, so there is no immediate concern about the security of your password. Nonetheless, if you use the same password on other sites, we recommend changing it as a precaution.
We reported our concerns to the Information Commissioner’s Office (ICO) within 72 hours of discovering the potential breach and engaged a third-party Cyber Incident Response (CIR) Team within the same timeframe. The CIR Team is investigating the reports, conducting a comprehensive audit of our IT systems, and identifying any vulnerabilities. This process is ongoing, and we expect to have further information within the next week. In the meantime, we have implemented several measures to ensure your data is secured.
In the interim period, please remain vigilant for any suspicious calls or phishing emails, as these are the most likely risks related to the specific data we hold.
We sincerely apologise for any concern or inconvenience this may cause and will update you as soon as we have more information.
Lee McIntosh
Chief Executive Officer
|
|
|
|
Post by Adalea on Oct 1, 2024 11:23:29 GMT
I have a separate email address that I use for my daily theatre newsletters, todaytix, and similar. It's a fairly new email address and I've only used it at the big name websites. I received 3 really strange phishing emails in the last day or so. Clearly related to this leak.
|
|
1,573 posts
|
Post by anita on Oct 2, 2024 9:55:47 GMT
I never received an "alert" but can't log in. It says I need to change my password.
|
|
1,573 posts
|
Post by anita on Oct 3, 2024 9:00:39 GMT
I never received an "alert" but can't log in. It says I need to change my password. It doesn't recognise my password so won't let me change it so I can't see the offers. |
|
