Supply chain
⛓ Supply Chain
Cornell University, Ithaca College, Virginia Tech University, SUNY Oswego, Colorado State University, Loyola University Chicago and McMaster University Third-Party Breach (March 2023)
Primary Source ↗Incident Details
Students’ bank accounts hacked because of ticketing software breach - The Ithacan. After attending a concert at Cornell University featuring Beach Bunny on Jan. 28, several Ithaca College students’ credit and debit card information was hacked. Your donation will support The Ithacan’s student journalists in their effort to keep the Ithaca College and wider Ithaca community informed. Your contribution will allow us to purchase equipment and cover our annual website hosting costs. Ithaca protesters demand ‘No Kings’ in third wave of nationwide anti-Trump rally • 629 Views. Third-party company: AudienceView.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- AudienceView
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2023-03-01 Breach occurred
- 2023-03-29 Publicly disclosed