QPR data breach

  • Please bear with us on the new site integration and fixing any known bugs over the coming days. If you can not log in please try resetting your password and check your spam box. If you have tried these steps and are still struggling email [email protected] with your username/registered email address
  • Log in now to remove adverts - no adverts at all to registered members!

Steelmonkey

Well-Known Member
Apr 11, 2011
27,136
46,474
113
Greenock
Just received this from the club....

You must log in or register to see images


Just a warning for anyone who doesn't subscribe, careful of any emails you may receive from the clubs accounts, like their Box Office account.
 
Evening all,
Just a quick one for you.
The QPR Box Office e-mail account has today been breached.
Can you please read below and communicate wherever possible not to open said e-mail(s)?
Thanks very much.

Matt



Dear Supporters,

We are writing to inform you that we have today identified that the Box Office e-mail account at QPR had been breached. Some of you may have received potential malicious e-mails from the account, i.e. [email protected], signed off by Sean Tucker. As a precaution, we advise you to not access these e-mails or any attachments sent. We have since frozen this account and are currently investigating the nature of the breach, and if any personal data is at risk.



We apologise for any inconvenience caused and will update you further once we have more information from our investigations.

Matt Webb

Press & Publications Manager
 
Another email from the club regarding the data breach......


"We want to provide you with an update on our investigations following our communication yesterday regarding the malicious email warning.

On 16 August 2018, the email account operated by the Box Office, [email protected], was accessed by an unauthorised user. Using this email, the unauthorised user sent out a document signed off as Sean, to supporters who had in the past corresponded with the Box Office team using the [email protected] email address. The Club’s IT Team identified this breach quickly and immediately froze the account.

Any supporters who received the email on 16 August but have not yet opened it, should delete it immediately.

Any supporters who received the email on 16 August and, having opened it, clicked on the link in the email, would have been directed to what purported to be a Microsoft OneDrive website, and if any supporters then further logged into this OneDrive website, please note your login details may have been compromised.

In addition, the unauthorised user may also have had access to historical emails sent by supporters to the [email protected] email address. Some of these emails included payment details sent to purchase tickets. If you have previously sent payment information to the Box Office email, we recommend that you monitor your account statements for evidence of fraud or identity theft and, if you are concerned or notice any suspicious activity on your account, contact your bank or credit card company immediately.

The Club is continuing to investigate this incident and we are liaising with the relevant authorities in this regard.

The Club understands the importance of your personal information and we take the protection of that information very seriously. We are sorry for any inconvenience this incident may cause.

If you have any questions or concerns, please contact the club’s Data Protection Officer at [email protected].

Please note that any future correspondence with the Box Office should still be directed to and will come from [email protected], as the Club can confirm that the email account is at present secure and can continue to be used."
 
Was the email offering a flimsy membership pack and some discount vouchers a scam? 33.50 for that seems dubious....

I did get the e-mail about the data breach but nothing malicious.
 
  • Like
Reactions: Steelmonkey