Data breach at Detroit Zoo gift shop under investigation

Officials with the Detroit Zoo said Wednesday that an investigation is underway to pinpoint the cause of a security breach at the zoo's gift shop.

The breach at the zoo includes eight others across the US, officials said in a press release Wednesday. Customers's credit and debit card numbers, names, expiration dates, and three-digit CVV security numbers have been compromised, the zoo said. 

“We are obviously concerned that the vendor’s system was compromised,” said Gerry VanAcker, Detroit Zoological Society chief operating officer, in a statement. “Transactions made since June 26 are not affected by the previous breach, and it is safe to use a credit or debit card at SSA’s retail locations.”

Malware was detected in the software of Service Systems Associates (SSA), the third-party operator of concessions and retail at the zoo, which affected purchases made between March 23 and June 25. A separate credit card processing system was installed by SSA after the breach was discovered, the press release says. 

More info is available here and here.