Cyber Incident Victim: TAIT Towers
Date:
Feb 2020
Location:
United States of America
Summary
A live event solutions provider experienced unauthorized access to its servers and employee email accounts, compromising personal and financial information including names, addresses, Social Security numbers, and financial account details. The breach was detected months after initial intrusion, prompting immediate server takedowns, credential resets, and engagement of cybersecurity investigators. The organization enhanced defenses by implementing multi-factor authentication and endpoint monitoring systems. While no confirmed misuse of exposed data occurred, potentially affected individuals were offered complimentary credit monitoring services to mitigate identity theft risks. The company emphasized its commitment to data security and addressed vulnerabilities following forensic review.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 16, 2020, unauthorized actors gained access to servers belonging to TAIT Towers, a global provider of live event solutions for clients including NASA, Disney, Universal, and major concert tours. The breach remained undetected until April 6, 2020, when TAIT discovered the intrusion and evidence that employee email accounts had also been compromised. The company immediately took affected servers and email systems offline and engaged a cybersecurity firm to investigate. Forensic analysis established the attackers operated within TAIT's systems for nearly two months before detection. TAIT reset all server and email login credentials following the discovery and initiated a comprehensive review of its security protocols. The incident impacted multiple entities within the TAIT group, which encompasses subsidiaries Brilliant, Kinesys, Production Glue, Stage Technologies, TAIT UK, and TAIT Navigator across 14 international offices.
Investigators determined the attackers accessed sensitive personal and financial information stored on compromised systems, including names, addresses, email addresses, dates of birth, Social Security numbers, and financial account numbers. TAIT found no evidence of data misuse but notified affected individuals about potential risks of fraud and identity theft. The company implemented multi-factor authentication and endpoint monitoring systems as additional safeguards, supplementing credential resets already performed. TAIT established a dedicated call center (855-917-3540) to provide free credit monitoring services to potentially impacted parties. Executive statements emphasized the company's commitment to data security and regret over inconveniences caused to employees, clients, and vendors. No operational disruptions to TAIT's live event services were reported in conjunction with the breach.