STAFF at Brentford FC have pledged their full support to fans who may have fallen victim to online fraud while attempting to buy tickets for the play off final.
A scam allegedly involving criminals being able to access the official ticket sales website and record customers details was brought to light on Wednesday.
The site is run by Ticket Zone which has already been responsible for thousands of sales to Bees fans ever since tickets for the match against Yeovil at Wembley on Sunday (19) were released.
One fan used a fan forum to claim £380 was taken from his account and used to buy Oyster card credits. Others have since come forward with similar stories and this alerted the club who have also called in the police to help with investigations.
A statement on the Brentford FC website this afternoon (Thursday) reads:
Brentford Football Club and Ticket Zone have been made aware that a number of cardholders’ details may have been compromised as a result of fans using the Ticket Zone to purchase tickets for Brentford’s npower League One Play-Off Final.
Following reports of customer concerns and speculation about the security of the Ticket Zone website, immediate and thorough checking and testing of its entire website and protective infrastructure has been undertaken.
All data was found to be clean and protected.
It is important to note that Ticket Zone does not store customer card data at any point and that all information is stored in a secure token system that is approved and provided by its banking partner.
Further examinations have also been undertaken in conjunction with the Danish IT company, Queue-it who provided the front-end queuing system ahead of the Ticket Zone site.
Once again, all systems are shown as clean.
However, following an investigation, it has been noted that a small number of attempts to access the site from unknown web destinations have arrived through unauthorised links shared via social media sites.
Ticket Zone has commissioned forensic specialists to assist their own technical teams with the on-going investigations.
All investigations point towards a MITM “man in the middle” attack intercepting internet traffic prior to landing on the queuing site.
An attack like this would allow a fraudulent third party to record key strokes as they are being made on the customer’s own browser.
When this occurs, neither the customer or Ticket Zone is aware that fraudulent data capture is taking place behind the scenes.
The crime has been reported to the Police via Active Fraud UK and they are now investigating this on Ticket Zone’s behalf.
All available data has been handed to the Police and they have open access to anything they require from Ticket Zone.
Any supporter that believes they have a problem with a booking made via Ticket Zone should please contact them by email, firstname.lastname@example.org, or by phone 08444 99 99 55 (option 3).
Brentford FC would like to thank its supporters who brought this to the attention of the Club and Ticket Zone so promptly.
This enabled Ticket Zone to act quickly and to restrict any further problems.
Both the Club and Ticket Zone sympathise with any inconvenience and hardship that has been caused to any supporters who have been impacted by this criminal behaviour.