Contact: Di Saunders, Office: 503-725-5714; Cell: 971-219-6869

Customers notified of potential security breach of event ticket vendor used by three Oregon universities

PORTLAND, June 26, 2013 – The Oregon University System (OUS) today announced that a third-party company, Vendini, Inc., used by three of its universities and one affiliated foundation to process event tickets, was itself the victim of a third-party criminal who used hacking technologies to access its databases. San Francisco-based Vendini manages box office and on-line ticket sales for theater events at Southern Oregon University, chamber music concerts presented by the Southern Oregon University Foundation, sporting events at Western Oregon University, and events at Oregon State University’s Memorial Union and University Theater.  

According to Vendini, the unauthorized intrusion into its systems occurred in late March 2013.  It discovered the intrusion on or about April 25, 2013.  Vendini says it delayed reporting the event to its customers, including SOU, OSU, the SOU Foundation and WOU, for several weeks to support law enforcement’s investigation of the intrusion. Vendini has already notified potentially impacted customers that the hacker may have accessed their personal information, such as name, mailing address, email address, telephone number, and credit card numbers and expiration dates. Vendini does not collect credit card security access codes (e.g., CVV, CVV2, PINs), social security numbers, usernames or passwords. 

Customers who had tickets processed through Vendini should have already received a notice directly from the company. The universities and foundation have also notified customers for whom they had an address or email address. Vendini customers who have not received a letter or email from a university/foundation should contact Experian for additional information at 866-271-3084.

The OUS is asking customers who suspect that they are the victim of identity theft to report their concerns to law enforcement. The universities and foundation have arranged for these customers to receive identity protection services at no cost to them for one year.  The OUS has also notified the State of Oregon and its Department of Consumer and Business Services (DCBS) and Treasury regarding this, and they have notified the banks involved.

Officials at the universities and the foundation value the privacy of their customers’ personally identifiable information and apologize for any inconvenience or concern that this incident may have caused them. OUS has asked ticket purchasers to contact their OUS Office of Risk Management with any questions at 503-798-9976.

—OUS

The Oregon University System (OUS) makes college a reality for Oregonians statewide by keeping higher education accessible, affordable and high quality. We integrate Oregon’s public universities with the entire PreK-20 education system to ensure student success.  OUS’ higher education offerings meet the needs of Oregon’s economy today and in the future, contributing to the vitality of the state and the success of more than 20,000 graduates a year.