Movie Mars security breach

[neoz]

Notice of Data Breach

Dear customer:

We are writing to you because of an incident involving access to information associated with online purchases made on our website http://www.moviemars.com. Although we are unaware of any actual misuse of your information, we are providing notice to you and other potentially affected customers about the incident, and about tools you can use to protect yourself against possible identity theft or fraud.

What happened?

The moviemars.com site is operated by a third-party company, aptos, inc. (our “platform provider”). We were informed on february 6, 2017 that the platform provider’s systems experienced an intrusion last year. The intruder or intruders placed malware on the platform provider’s services, and by doing so gained access to our customers’ payment card data. To date, the investigation indicates that the intrusion began in approximately february 2016 and ended in december 2016. The attackers gained access to customer information including payment card numbers as customers made transactions on the platform provider’s systems, and had access to historical payment card data. Because you have provided your payment card information to us in the past, we are notifying you about this data breach.

You may wonder why you are hearing about the breach now. The platform provider did not discover the breach until november 2016. In addition, law enforcement is investigating, and asked that notification to customers be delayed to allow the investigation to move forward.

What information was involved?

The information that the attacker had access to includes your first and last name, address, phone number, and any debit or credit card numbers with expiration dates you may have used on our website.

What are we doing?

Our platform provider has worked with a leading cybersecurity firm to remove the malware from its systems and is actively monitoring the platform to safeguard personal information. Our platform provider has also contacted and offered its cooperation to federal law enforcement.

What you can do

please be sure to review the enclosed “additional resources” section included with this letter. This section describes some additional steps you can take to help protect yourself (such as obtaining a copy of your credit report, or placing a security freeze on your credit report) and provides important contact information for the federal trade commission, other law enforcement agencies, and credit reporting agencies.

In addition, we recommend you consider the following:

Contact your credit or debit card issuer. While we have taken steps to notify credit card processors, we recommend that you also immediately notify your credit card issuing bank and follow its advice with regard to your credit card.

Regularly review your financial statements. We recommend you remain vigilant by regularly reviewing your credit card and bank account statements and monitoring free credit reports; and immediately alert your credit card issuing bank of any suspicious charges. This is one of the most important steps that you can take to detect and prevent any unauthorized use of your credit card number.

Be aware of online “phishing” schemes. You should also always be on the lookout for phishing schemes – emails where fraudsters pose as legitimate companies in order to trick people into disclosing personal information or clicking a link that causes the installation of malware. Any email correspondence we may send regarding this matter will not contain any clickable hyperlinks and will not ask you to reply with personal information. Never provide sensitive information to unsolicited requests claiming to come from us, your bank, or other organizations.

For more information

we sincerely regret that this incident happened, and will continue to put the right measures in place to maintain the security of your information. For more information on preventing identity theft, please review the “additional resources” section.