The Centre for Computing History (CCH) in Cambridge, England, has apologised for an “embarrassing” breach in its online customer datafile, though thankfully no payment card information was exposed.
The museum for computers and video games said it was notified that a unique email address used to book tickets via its website “has subsequently received a phishing email that looked like it came from HSBC.”
“Our investigation has revealed that our online customer datafile has been compromised and the email addresses contained within are now in the hands of spammers,” says the letter to visitors from Jason Fitzpatrick, CEO and trustee at CCH dated 19 October.
Credit card details, financial information, and passwords are not handled by the website so were not caught up in the leak, said the museum. The information that was exposed includes names, addresses, email addresses, and the name of the product or event that was purchased.