Information suggesting MITM “man-in-the-middle” infiltration
Brentford Football Club and Ticket Zone have been made aware that a number of cardholders’ details may have been compromised as a result of fans using the Ticket Zone to purchase tickets for Brentford’s npower League One Play-Off Final.
Following reports of customer concerns and speculation about the security of the Ticket Zone website, immediate and thorough checking and testing of its entire website and protective infrastructure has been undertaken.
All data was found to be clean and protected.
It is important to note that Ticket Zone does not store customer card data at any point and that all information is stored in a secure token system that is approved and provided by its banking partner.
Further examinations have also been undertaken in conjunction with the Danish IT company, Queue-it who provided the front-end queuing system ahead of the Ticket Zone site.
Once again, all systems are shown as clean.
However, following an investigation, it has been noted that a small number of attempts to access the site from unknown web destinations have arrived through unauthorised links shared via social media sites.
Ticket Zone has commissioned forensic specialists to assist their own technical teams with the on-going investigations.
All investigations point towards a MITM “man in the middle” attack intercepting internet traffic prior to landing on the queuing site.
An attack like this would allow a fraudulent third party to record key strokes as they are being made on the customer’s own browser.
When this occurs, neither the customer or Ticket Zone is aware that fraudulent data capture is taking place behind the scenes.
The crime has been reported to the Police via Active Fraud UK and they are now investigating this on Ticket Zone’s behalf.
All available data has been handed to the Police and they have open access to anything they require from Ticket Zone.
Any supporter that believes they have a problem with a booking made via Ticket Zone should please contact them by email, firstname.lastname@example.org, or by phone 08444 99 99 55 (option 3).
Brentford FC would like to thank its supporters who brought this to the attention of the Club and Ticket Zone so promptly.
This enabled Ticket Zone to act quickly and to restrict any further problems.
Both the Club and Ticket Zone sympathise with any inconvenience and hardship that has been caused to any supporters who have been impacted by this criminal behaviour.