The Toronto Zoo said transaction data, including credit card information, “leaked on the dark network” after a cyber attack more than a year ago.
zoo A final update has been released Information about the general admission and member purchases made by all guests and members were obtained in the ransomware attack this weekend of the January 2024 incident.
The damaged data includes one and last name, in some records, street address, phone number and email address. For guests and members who conduct credit card transactions between January 2022 and April 2023, their credit card and the last four digits of their maturity date are occupied.
“A copy of the transaction data was obtained and leaked online last year,” the zoo said in a statement released on Friday. “The way the data leaked makes it difficult to download. It has not been released yet, although that may change.”
As phishing and online fraud increases, the zoo adds that they encourage affected people to stay alert and regularly check their financial account statements.
Zoo officials first reported a privacy vulnerability of January 17, 2024. Personal data from the compromised file server has been stolen. At the time, it was believed that the data only involved current and former employees in 1989.
“This cyber incident is extremely challenging for us, especially our current and past employees whose personal information has been compromised, but due to decades of loss of wildlife conservation research,” the zoo said in its update.
The zoo said the matter had been reported to the Office of the Ontario Information and Privacy Commissioner (IPC) and the investigation documents had been opened. Officials said they have taken important steps to ensure their information technology is safer and able to better identify security issues.
