French Monuments Agency Reports Ransomware Attack on Ticketing Provider
Summary
The Centre des monuments nationaux says its online ticketing provider suffered a ransomware attack on March 2. Some customer data may have been exposed, but no exfiltration or fraudulent use has been established; payment data was unaffected.
Key points
- The Centre des monuments nationaux said its online ticketing provider was hit by a ransomware attack on March 2.
- Potentially exposed data includes email addresses, purchase histories and, in some cases, customer account details and encrypted passwords.
- The agency said no data exfiltration or fraudulent use had been established; payment data was not affected because a separate provider handles payments.
- The ticketing service was being restored, and the incident was being followed by France’s ANSSI and Culture Ministry specialists.
- The CNIL was informed of the incident.
Article Details
- Victim Organization
- Unnamed online ticketing provider serving the Centre des monuments nationaux
- Incident Type
- Ransomware cyberattack against the Centre des monuments nationaux's online ticketing provider
- Data Types Exposed
- Email addresses (potentially exposed)
- Purchase history (potentially exposed)
- Customer account details: name, first name, country, postal code, and encrypted password (potentially exposed)
- Operational Impact
- The online ticketing service was affected; efforts were underway to restore it. The article does not specify the duration or extent of the disruption.
- Ransom Or Extortion
- The attack was described as ransomware. No ransom demand or extortion activity was reported.
- Claim Status
- confirmed