Security News > 2022 > October > Online ticketing company “See” pwned for 2.5 years by attackers
See Tickets is a major global player in the online event ticketing business: they'll sell you tickets to festivals, theatre shows, concerts, clubs, gigs and much more.
See Tickets finally concludes that attack "May have resulted in unauthorised access" to payment card information.
See Tickets says "We are not certain your information was affected", but notifies customers.
Simply put, the breach lasted more than two-and-a-half years before it was spotted at all, but not by See Tickets itself.
See Tickets than waited one more month before notifying customers, admitting that it still didn't know how many customers had lost data in the breach.
Even now, well over three years after the earliest date at which the attackers are known to have been in See Ticket's systems, the company still hasn't concluded its investigation, so there may yet be more bad news to come.