{"id":734,"date":"2023-05-07T01:50:07","date_gmt":"2023-05-07T06:50:07","guid":{"rendered":"https:\/\/kentprotect.com\/?p=734"},"modified":"2023-05-07T02:19:44","modified_gmt":"2023-05-07T07:19:44","slug":"breach-report-nyc-metropolitan-opera-suspected-ransomware-breach-affects-45000","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/05\/07\/breach-report-nyc-metropolitan-opera-suspected-ransomware-breach-affects-45000\/","title":{"rendered":"Breach Report: NYC Metropolitan Opera suspected ransomware\/breach affects 45,000+"},"content":{"rendered":"
<\/div>\n

One-sentence summary: <\/strong><\/p>\n\n\n\n

A December 2022 suspected ransomware attack on the NYC Metropolitan Opera affected over 45,000 consumers and “froze” operations, with victims notified nearly 8 months after the breach started. <\/p>\n\n\n\n

Who was involved?<\/strong><\/p>\n\n\n\n

The NYC Metropolitan Opera, 45,094 consumers, and a threat actor. <\/p>\n\n\n\n

What was the timeline?<\/strong><\/p>\n\n\n\n

September 30, 2022: Threat actor gains initial access to the Met<\/p>\n\n\n\n

December 6, 2022: Metropolitan Opera detects the breach and stops it, suffers service outage (Bilefsky, 2022)<\/p>\n\n\n\n

December 15, 2022: The Met restores services (Bilefsky, 2022)<\/p>\n\n\n\n

May 3, 2023: Metropolitan Opera begins consumer notification <\/p>\n\n\n\n

What occurred?<\/strong><\/p>\n\n\n\n

The Metropolitan Opera was breached for over two months before becoming the victim of a suspected ransomware attack in December 2022 (Basta, 2023; Bilefsky, 2022). During the attack, operational costs were significant as IT-based services suffered an outage during a peak holiday season (Bilefsky, 2022). Finally, victims are being notified potentially almost 8 months after the breach of potentially having their sensitive data breached, potentially including: “name, financial, account information, tax identification number, Social Security number, payment card information, and driver\u2019s license number” (The Metropolitan Opera, 2023, p. 2). <\/p>\n\n\n\n

Estimated costs:<\/strong><\/p>\n\n\n\n

Incident response costs, breach notification costs, operational costs and downtime (~$200k\/day season=~$1.4 million partially impacted) (Bilefsky, 2022), 12 months Kroll identity services, M-F call center<\/p>\n\n\n\n

Involved laws: <\/strong><\/p>\n\n\n\n

State: Maine: 10 M.R.S.A. \u00a7 1346<\/p>\n\n\n\n

Root cause: <\/strong><\/p>\n\n\n\n

TBA or N\/A (see disclaimer)<\/p>\n\n\n\n

Lessons learned: <\/strong><\/p>\n\n\n\n

TBA or N\/A (see disclaimer)<\/p>\n\n\n\n

Sources: <\/strong><\/p>\n\n\n\n

Basta, S. (2023). Data Breach Notifications. In Privacy, Identity Theft and Data Security Breaches<\/em>. Office of the Maine Attorney General. Retrieved May 7, 2023, from https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/478d1a19-4c27-4d7f-8808-69a49696ccb1.shtml<\/p>\n\n\n\n

Bilefsky, D. (2022, December 15). Met Opera\u2019s Website and Box Office Are Back, 9 Days After Cyberattack. The New York Times<\/em>. https:\/\/www.nytimes.com\/2022\/12\/15\/arts\/music\/met-opera-cyberattack.html<\/p>\n\n\n\n

The Metropolitan Opera. (n.d.). untitled<\/em>. YouTube. https:\/\/yt3.googleusercontent.com\/ytc\/AGIKgqNqAMhv_nv4yg7Ydj7PqQg9Yef-bWxETS5F7OTv=s900-c-k-c0x00ffffff-no-rj<\/p>\n\n\n\n

The Metropolitan Opera. (2023). The Metropolitan Opera – Notice of Data Event – ME.pdf. In Data Breach Notifications<\/em>. Office of the Maine Attorney General. Retrieved May 7, 2023, from https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/478d1a19-4c27-4d7f-8808-69a49696ccb1.shtml<\/p>\n\n\n\n

\n