Online ticket sales company StubHubhas sought to reassure customers that their accounts are safe, following the discovery of an international scam that exploited more than 1,600 StubHub accounts.
The company, which is owned by eBay, told its customers in posts on Twitter and Facebook that their accounts were safe, and that its technical and financial systems had not been breached.
“Your accounts are safe and there have been no breaches of our technical or financial systems,” the company said in a Facebook post. “A year ago, less than 0.006 percent of our customer accounts were accessed by cybercriminals who had obtained customer logins and passwords through data breaches at other businesses.
“Our security team immediately contacted customers affected by the fraud to reverse any unauthorized transactions made from their accounts and assist with changing passwords.” “We are working with New York City and law enforcement around the world to bring the fraudsters to justice.”
The scam, which began last year, involved two Russian nationals who purchased up to 3,500 tickets using compromised accounts using pre-existing payment information. They then sent the tickets to two individuals in Manhattan and New Jersey, who resold them. In doing so, they managed to make an estimated $1.5 million.
Warrants have been issued in New York for six of the cybercriminals involved in the fraud by Manhattan District Attorney Cyrus Vance Jr., who is bringing them to trial on felony charges.
“The defendants have been arraigned on felony charges, including money laundering, aggravated theft, and criminal possession of stolen property.”
