Sources: Thieves got into StubHub accounts
NEW YORK — Cyber thieves got into more than 1,000 StubHub customers’ accounts and fraudulently bought tickets for events through the online ticket reseller, a law enforcement official and the company said.
Arrests were expected in a case that sprawled across international borders, said the official, who wasn’t authorized to discuss it ahead of arrests being announced and spoke on the condition of anonymity.
Manhattan District Attorney Cyrus R. Vance Jr. was expected to hold a news conference today with London and Royal Canadian Mounted Police officials. A spokesman for Vance’s office declined to comment Tuesday night on the case, which comes amid growing concern about data thieves targeting retailers and other consumer giants.
StubHub, which is based in San Francisco, said that the thieves didn’t break through its security — rather, they got account-holders’ login and password information from data breaches at other websites and retailers or from key-loggers or other malware on the customers’ computers, spokesman Glenn Lehrman said.
The company detected the unauthorized transactions last year, contacted authorities and gave the affected customers refunds and help changing their passwords, he said.
It’s unclear whether the digital prowlers then exploited their access to scoop up more information from the compromised accounts. The company and the law enforcement official wouldn’t give further details Tuesday.
