Utah Soccer Families –
We have received several updates from Stack Sports Information Security Team Connect regarding the credit card issues that were brought to our attention last Thursday.
First, Stack Sports did confirm a credit card data breach in the payment portal. On a positive note, they have reported that though the investigation is ongoing, based on their current findings, they do not believe any user account information stored on the Sports Connect Association Platform, such as birth certificates or personal information was affected.
Also confirmed was the issue being corrected and that registration and payments can safely resume.
In the meantime, keep in mind that any wrongfully obtained card data may not be improperly used all at once. All members should check each payment card that they used on the platform of Sports Connect Association for a UYSA registration or event. If you have any indication that there is a problem with your payment cards, regardless of whether you used Sports Connect recently, you should contact your card issuer or financial institution and follow their guidance. If you have particular concerns, even without apparent evidence of fraud, the card issuer may out of caution suggest issuing new cards.
Lastly, Sports connect is arranging for notifications, a call center, FAQs, credit monitoring, and identity protection services, including insurance, for all affected members within Utah Soccer. We will continue to work with Sports Connect to ensure that these services are available as soon as possible.
We are truly sorry for issues this problem caused and appreciate your understanding and patience as we worked with Sports Connect to understand what was happening and to come to a resolution.
Subject: Important Update from Sports Connect Association
· Our cybersecurity response team is investigating the incident on several fronts and our investigation is ongoing.
· We have not yet fully determined the impact of the incident.
· Based on our current findings we can say that:
o The issue does not appear to have affected any user account information stored on the Sports Connect Association platform, such as census records, player information, age validation documents, etc.
o The issue appears to have affected only credit card information transmitted to the platform between certain end user systems and the payment functionality of our association product. (Please note: Sports Connect Association product does not store credit cardholder information or payment information in the platform.)
o The apparent source of the issue has been interrupted and the systems impacted by that source have been remediated.
o The team is compiling a list of affected individuals, including all affected individuals from UYSA.
o The team is arranging for notifications, a call center, FAQs, credit monitoring, and identity protection services, including insurance, for affected individuals.
We understand your members’ concerns regarding payment card safety. If they notice any charges on their payment card that they do not recognize, please have them take the following actions:
· Contact Their Bank: Have them contact their card issuer or financial institution immediately.
· Follow Fraud Guidance: Follow the card issuer’s or financial institution’s guidance regarding fraud protections, charge disputes, or card replacement, as they are best positioned to assist with unauthorized transactions.
If you have any questions about this notice, please contact us at security.notifications@stacksports.com. Please do not send full payment card numbers, security codes, passwords, or other sensitive information by email.
Additional update:
· We can now confirm that the identified source of the recent disruption has been neutralized. In addition, all systems affected by this source have been successfully restored. To maintain the security of our platform, our security and technical teams are performing and will continue to perform evaluations of our services and systems in connection with our ongoing response to this incident.
· We will issue further guidance when we have more information to report, including timing of the availability of further assistance regarding call center availability, notifications, and other services.