ONLINE TICKET RETAILER Ticketweb has admitted to a security breach of its marketing system that holds email information.
The company has confirmed that someone gained unauthorised access to its marketing server and sent out fake emails. Its users were sent up to four emails requesting them to update Adobe Acrobat to the latest version via a malicious link.
Ticketweb said, "We have discovered that our Ticketweb UK direct email marketing system was exposed to unauthorised access. As a result, you may have received up to four emails today from an unauthorised party with the subject as 'Action Required: Update Your PDF Application' and containing a link to update an Adobe Acrobat PDF application. Please do not click this link, but delete the email."
The firm said it has taken action to close the vulnerability and that no personal information or credit card details were accessed.
We received two emails from Ticketweb's email system here at The INQUIRER that claimed to be from Adobe, but did not receive the follow-up email.
For some reason the malicious email claims the new year is approaching even though it's already here. It also uses one of Adobe's regional office addresses rather than the headquarters address.
"We sincerely regret any inconvenience this has caused. We are continuing to investigate this unauthorised access, and will send you a follow-up email when we have additional information." added Ticketweb, which is advising customers to contact its helpdesk with any queries. µ
Tags: Security