Notice of Data Breach

May 16, 2019

The USD Torero Store was recently notified by one if its service providers of a security incident that could affect the payment card information of some customers who made purchases on our website, www.usdtorerostores.com, between April 13th and April 26th, 2019. As a precaution, the USD Torero Store provided a notice to make potentially affected customers aware of the incident and provide information on steps they can take to help protect themselves. We take the security of our customers’ information very seriously and deeply regret any concern this may cause.

What Happened

The USD Torero Store recently learned that PrismRBS, a vendor that works with USD Torero Store to provide its eCommerce website, experienced a security incident in which an unauthorized third party was able to install malicious code designed to capture payment card information on some of the eCommerce servers that host USD Torero Store’s website.

What Information Was Involved

Based on a forensic investigation, it appears that the unauthorized party was able to access payment card information, including cardholder names, card numbers, expiration dates, card verification codes, billing address and phone number for certain transactions made on the website during a specific and limited timeframe, from April 13 to April 26, 2019. Because we do not collect sensitive information such as Social Security, passport, or driver’s license numbers, this type of information was not affected by this incident. Please note that this incident affected only eCommerce transactions made on www.usdtorerostores.com between April 13th and April 26th, 2019; transactions made outside of this period of time, those made in our on-campus facility and other university transactions were not affected by this incident.

What We Are Doing

We take the privacy of personal information seriously and deeply regret that this incident occurred. The vendor has informed us that they engaged external cybersecurity firms to assist in their investigation, and that they also are working directly with Homeland Security and the FBI. The vendor is taking steps to enhance the security of its systems, including implementing additional threat monitoring and detection tools.

Other Important Information

As an additional precaution, USD Torero Store provided information and resources to help individuals protect their identities. This includes an “Information about Identity Theft Protection” reference guide, which describes additional steps the affected customer may take to help protect themselves, including recommendations from the Federal Trade Commission regarding identity theft protection.

For More Information

For more information about this incident, or if you have additional questions or concerns, you may contact me directly at 619-260-4558 between the hours of 9:00am and 5:00pm Pacific time, Monday through Friday or via email at jthrailkill@sandiego.edu. Again, we sincerely regret any concern or inconvenience this incident may cause.

 

Sincerely,

Jim Thrailkill
Director, USD Torero Store
jthrailkill@sandiego.edu
(619) 260-4558
USD Torero Store
5998 Alcala Park
San Diego, CA 92110