How Data Hackers May Have Spoiled Detroit Zoo Visit

» Get Patch’s daily newsletter and real-time news alerts.

Credit card and banking data of visitors to the Detroit Zoo and eight other zoos across the country may have been breached if they made purchases at the gift shop before June 26.

The zoo said in a statement that malicious malware was found on software used by the third-party retailer, Service Systems Associates (SSA), which is now working with an independent forensic investigator to prevent additional problems.

“We are obviously concerned that the vendor’s system was compromised,” said Gerry VanAcker, the zoo’s chief operating officer.

He said transactions made since June 26 are not affected by the breach, and it is safe to use a credit or debit card at SSA’s retail locations. Affected purchases were made at gift shops between March 23 and June 25. After learning of the breach, SSA installed a separate credit card processing system at its retail outlets.

The investigation comes after authorities contacted the zoos regarding stolen credit card information. SSA is working with an independent technology forensic expert to study the incident and prevent further issues.

In addition to credit and debit card numbers, the cyber hackers reportedly gained access to card holders’ names, card expiration dates and three-digit CVV security codes.

The DZS IT systems – including those for ticket and membership sales – were not affected by the data breach and are secure.

The Detroit Zoo’s website has up-to-date information provided by the vendor, as well as additional information about the breach.