Credit and debit cards used at Vacationland Vendors arcade games in Wisconsin Dells may be affected by a data breach.
Vacationland Vendors, Inc., a supplier of arcade equipment and vending machines to businesses, announced Monday that up to 40,000 cards used at its Wisconsin Dells and Sevierville, Tenn., arcades may have been exposed, according to a business press release.
The company discovered that a hacker gained unauthorized access to its card processing systems at Wilderness Waterpark Resort in the Dells and Wilderness at the Smokies in Sevierville , said Bill Bray, spokesperson for the Wisconsin Dells-based Vacationland Vendors.
[…]
The breach occurred March 22, according to the release.
Read more on fdlreporter.com.
A statement on Vacationland Vendors’ web site says:
An Important Notice to our Customers
This notice pertains to any customer who used a credit card or debit card at the Wilderness Resorts in Wisconsin or Tennessee from December 12, 2008 to May 25, 2011. In advance, Vacationland Vendors apologies for any inconvenience that you may experience from the circumstances described below.
Vacationland Vendors recently discovered that an unauthorized person wrongfully accessed certain parts of the point of sales systems that Vacationland Vendors uses to process credit and debit transactions at the Wilderness Resorts. Based upon its investigation to date, Vacationland Vendors reasonably believes that a computer hacker improperly acquired credit card and debit information. This incident did not involve an internal security issue within the Wilderness Resort. Vacationland Vendors has learned that other businesses just like its’ own have been affected by this computer hacker.
Vacationland Vendors has moved swiftly to address this unfortunate incident and is working with an outside consultant to ensure that its point of sale systems are secure and protected from any further intrusions.
If you have used your credit card or debit card at the Wilderness Resort locations from December 12, 2008 through May 25, 2011, please consider taking the following immediate steps in order to prevent the unauthorized and unlawful use of your personal information:
[…]
I don’t see any explanation of why they retained card numbers going back to December 2008.