14 DAY TRIAL // Hersheypark in Pennsylvania received a warning that payment processing systems at its locations may have been compromised and it is currently carrying out an investigation into the matter.
Multiple financial institutions observed a series of fraudulent transactions performed on the accounts of customers that used their payment cards at Hershey properties, security blogger Brian Krebs reported on Wednesday.
Hershey Entertainment received fraudulent charge reports from visitors
Hersheypark was founded in 1906 as a relaxation space for the employees of the Hershey Chocolate Company, but it expanded over the years into one of the most sought attractions in the state, with over 3 million people visiting the location in the last years.
In their efforts to protect customers and money, banks monitor underground forums frequented by cybercriminals trying to sell stolen payment card information. When a new offer becomes available, a small sample of the “merchandise” is purchased to determine the retailer breached by the hackers.
Hershey Entertainment and Resorts Company, the owner of the amusement park, said in a statement to Krebs that it received reports from their guests regarding illegal charges on their cards after visiting the park.
The company is seeking evidence of a breach
“We take reports like this very seriously,” Kathleen McGraw, director of communications for the company told the blogger.
“While our company does have security measures in place designed to prevent unauthorized access to our network, we immediately began to investigate our system for signs of an issue and engaged an external computer security firm to assist us. The investigation is ongoing,” she added.
According to Krebs, three different financial institutions identified evidence of fraudulent transactions on cards used at Hersheypark between for a period of more than two months, from mid-March until late May 2015.
The cards had been used at various locations serving food and beverages, as well as at ticketing stations.