Cyber Incident Victim: ShowTix4U
Date:
Nov 2015
Location:
United States of America
Summary
A Nevada-based online ticket sales platform experienced a data breach impacting customers who used its services between April and September, exposing them to heightened credit card theft risks. The service, utilized by multiple Central Wisconsin school districts and community theater organizations for event ticket sales, confirmed unauthorized access potentially compromised financial data during this period. The incident primarily affected users who conducted transactions through the platform, though specific details regarding the breach's scope or methodology were not disclosed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
ShowTix4U, a Nevada-based online ticket sales platform, experienced a data breach impacting customers who used its services between April and September 2015. The company, widely utilized by Central Wisconsin school districts including Wausau and DC Everest for selling event tickets, also served multiple local community theater organizations. The breach exposed customer information, elevating risks of credit card theft for affected individuals. ShowTix4U publicly disclosed the incident on November 4, 2015, following reporting by Ryan Burk through WSAW. The announcement did not specify the exact number of compromised accounts or the nature of exposed data beyond credit card risks.
The breach notification identified the vulnerable timeframe as a six-month window preceding September 2015, though the exact intrusion method and discovery timeline remained undisclosed. ShowTix4U warned all customers transacting during the affected period about potential financial fraud risks. No operational disruptions or system downtime were reported in conjunction with the incident. The company's disclosure did not outline specific remediation measures offered to victims beyond the general warning. Local educational and arts organizations relying on the platform faced secondary reputational impacts due to their association with the compromised service. Public awareness of the breach spread through cybersecurity channels including the VERIS Community Database.