{"id":585,"date":"2014-08-29T06:55:42","date_gmt":"2014-08-29T12:55:42","guid":{"rendered":"http:\/\/www.parkrag.com\/?p=585"},"modified":"2014-08-29T06:55:42","modified_gmt":"2014-08-29T12:55:42","slug":"two-fairs-two-potential-credit-card-breaches","status":"publish","type":"post","link":"https:\/\/v2.parkrag.com\/index.php\/2014\/08\/29\/two-fairs-two-potential-credit-card-breaches\/","title":{"rendered":"Two Fairs &#8212; Two Potential Credit Card Breaches"},"content":{"rendered":"<p>On Wednesday, Summit County announced that a third-party vendor may have had a credit card breach that impacted up to 951 credit card and debit card purchases at the Summit County Fair. \u00a0This impact has reportedly led to multiple County residents receiving unauthorized charges up to $5000. \u00a0The County has sent a letter to each person effected and posted information online. \u00a0While the County hasn&#8217;t confirmed the vendor&#8217;s name, the Deseret News stated, &#8220;[The County Spokesperson]\u00a0said it is believed a third-party vendor offering online sales of tickets to the rodeo and derby was compromised.&#8221;<\/p>\n<p>While the ticket vendor has been removed from the summitcountyfair.org website, the Internet Wayback Archive indicates it was:<\/p>\n<p><a href=\"https:\/\/www.ezticketlive.com\/checkout\/eventbdate.asp?id=181\">EZTicketLive.com<\/a><\/p>\n<p><!--more--><\/p>\n<p>Meanwhile, in Aberdeen South Dakota, the Brown County Fair has just wrapped up. \u00a0However, weeks before Summit County had been notified of an issue by residents, Brown County was finding out they had a security issue as well. \u00a0According to the <a href=\"http:\/\/www.aberdeennews.com\/news\/local\/investigation-into-unauthorized-credit-card-charges-ongoing\/article_934e20ff-8539-5721-8701-a38c835f3c86.html?mode=jqm\">Aberdeen News<\/a>, &#8220;An investigation into unauthorized charges appearing on the credit card bills of some people who bought Brown County Fair grandstand entertainment tickets online is still ongoing, according to the state. There have been roughly 50 reports concerning the charges, said Tom Schmitt, chief deputy with the Brown County Sheriff\u2019s Office. Whether the ticketing website used by the fair is a common denominator is being looked into by the state Division of Criminal Investigation.&#8221;<\/p>\n<p>What company managed online ticketing for Brown County? EZticketlive.com.<\/p>\n<p>There have been no formal charges against EZTicketLive in Aberdeen and The Summit County Fair incident is still being investigated. \u00a0<strong>No guilt has been assessed for these credit card crimes. \u00a0It should not be\u00a0assumed that EZTicketLive was involved or culpable in any manner.\u00a0<\/strong><\/p>\n<p>Yet, as a citizen of Summit County, we should\u00a0take a look at their site and assess whether we would feel comfortable buying tickets from the company\u00a0in the future.<\/p>\n<p>Below is the\u00a0website that appears to have been used for our fair:<\/p>\n<p><a href=\"https:\/\/www.ezticketlive.com\/checkout\/eventbdate.asp?id=181\"><img decoding=\"async\" class=\"alignleft size-large wp-image-586\" src=\"http:\/\/www.parkrag.com\/wp-content\/uploads\/2014\/08\/ezticket1-1024x537.jpg\" alt=\"ezticket1\" width=\"860\" height=\"450\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>The first thing to notice is that the site\u00a0is Copyright 2006. That&#8217;s a long time ago. That doesn&#8217;t mean it was last updated then, but it does mean there is little attention to detail being paid to parts of the site. Next, when\u00a0&#8220;security&#8221; seals that are supposed to indicate trust, like Credit Card Guard,\u00a0are clicked, one that says the site was last scanned in 2012. Another says it was scanned July 19, 2014 and is scanned quarterly for vulnerabilities. With the pace of hackers, that just isn&#8217;t good enough. Daily security scans, which attempt to find\u00a0vulnerabilities every day, are available from many major vendors. Finally, we see a seal from\u00a0Authorize.net, their credit card processor, that says they\u00a0are a customer. That means very little to me when I think of overall security.<\/p>\n<p>The problem with all of this is that even if they are using computer scans there are so many other ways a system could be compromised. It&#8217;s far more important to be on up to date on technologies, with good programmers, who are constantly looking for problems. Unfortunately we don&#8217;t have access to that information, so we are forced to look at other tells, like a 2006 copyright, outdated seals, and that their platform that uses a previous generation technology (ASP), that is still supported by Microsoft, but is very long in the tooth.<\/p>\n<p>Hindsight is 20-20, but in the future we need to demand more from our government in Coalville. \u00a0Whether this theft of credit card details is related to online ticket purchases or not, we need decision makers to ensure that applications that collect our personal information, capture\u00a0credit cards, or maintain sensitive\u00a0data are best in class. \u00a0While no system is 100% secure, the systems that our County chooses for us to use should at a minimum\u00a0have the appearance of being well maintained. \u00a0It is also our job as citizens to stand up, raise our hands, and not use systems that don&#8217;t appear to have our best interests at heart. \u00a0That is one way to ensure we are receiving the protection we need.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On Wednesday, Summit County announced that a third-party vendor may have had a credit card breach that impacted up to 951 credit card and&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/posts\/585"}],"collection":[{"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/comments?post=585"}],"version-history":[{"count":0,"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/posts\/585\/revisions"}],"wp:attachment":[{"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/media?parent=585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/categories?post=585"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/v2.parkrag.com\/index.php\/wp-json\/wp\/v2\/tags?post=585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}