Supply chain ⛓ Supply Chain

Cornell University, Ithaca College, Virginia Tech University, SUNY Oswego, Colorado State University, Loyola University Chicago and McMaster University Third-Party Breach (March 2023)

📅 2023-03-01 🏢 AudienceView
Primary Source ↗

Incident Details

Students’ bank accounts hacked because of ticketing software breach - The Ithacan. After attending a concert at Cornell University featuring Beach Bunny on Jan. 28, several Ithaca College students’ credit and debit card information was hacked. Your donation will support The Ithacan’s student journalists in their effort to keep the Ithaca College and wider Ithaca community informed. Your contribution will allow us to purchase equipment and cover our annual website hosting costs. Ithaca protesters demand ‘No Kings’ in third wave of nationwide anti-Trump rally • 629 Views. Third-party company: AudienceView.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
AudienceView
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2023-03-01 Breach occurred
  2. 2023-03-29 Publicly disclosed