Ticketmaster UK Limited

€1,405,000

Insufficient technical and organisational measures to ensure information security

Ημερομηνία απόφασης

13 Νοεμβρίου 2020

Αρχή

Information Commissioner (ICO)

GB

Τομέας

Industry and Commerce

Χώρα

GB

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

Ticketmaster UK Limited has been fined GBP 1.25 million (approximately EUR 1.405 million) for failing to protect the personal data of its customers with adequate security measures. Potentially 9.4 million European customers could have been affected by a cyber attack between February 2018 and June 23, 2018 due to the use of an insufficiently secured chat bot hosted by a third party in its online payment site which allowed an attacker to gain access to customers' financial information. According to the Data Protection Agency, personal data such as names, full payment card numbers, Ticketmaster usernames and passwords, expiration dates and Card Verification Value (CVV) numbers were affected. The DPA also found that 60,000 payment cards belonging to Barclays Bank customers were subject to fraud, and several international banks also reported fraudulent activity to Ticketmaster.

Νομικές παραπομπές

Art. 5 (1)Art. 32

Θέματα & Παραβάσεις

Insufficient technical and organisational measures to ensure information security

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.