Breaches and incidents

Viacao Aguia Branca (Brazil): incident on ticket sales websites may have compromised data of 7,883 customers

The bus company confirmed a cybersecurity incident in environments linked to its official ticket-sales websites, and “dados de 7.883 clientes podem ter...

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • The bus company confirmed a cybersecurity incident in environments linked to its official ticket-sales websites, and “dados de 7.883 clientes podem ter sido comprometidos”; data types were not specified (Diario do Transporte, which dates the article 16 Sep but says notices went out Thursday 17 Sep).
  • Root cause: not disclosed.
  • No attacker named.
  • The company says the problem was limited to the affected sites and is resolved; its app, Zap Passagens and already issued tickets were not affected, and customers were warned not to give passwords, SMS codes or card details by phone.