SAM Magazine-Ludlow, Vt., Mar. 31, 2008-Okemo Mountain Resort revealed today that it has been a recent target of criminal efforts to gain access to credit data by infiltration of its computer network. Okemo believes the intruder gained potential access to credit card data, including cardholder names, account numbers and expiration dates.

An expert in data security and forensics hired by Okemo to assist in the investigation and response found that the resort's computer system was improperly accessed by an outside party for a 16-day period between Feb. 7 and Feb. 26. Affected consumers potentially include those who used their credit cards at Okemo during those dates, as well as those who did so from January through March 2006. 

 

The exact number of cardholders affected is unknown. The forensic review determined that the intruder may have accessed credit card data from up to 28,168 transactions processed at Okemo during the 16-day period. The actual number of credit cards holders involved in the transactions is likely to be smaller, each card was likely used for multiple transactions. In addition, there may have been access to 18,401 individual credit cards used at Okemo from January through March 2006, many of which are believed to have expired. There was no evidence of any security breach to the computer systems at Okemo's sister resorts, Mount Sunapee or Crested Butte. 

 

Upon discovery of the intrusion, Okemo initiated security measures to block the infiltration and prevent any further unauthorized access. Okemo has provided notice to Visa, MasterCard and American Express, and is cooperating fully with the credit card companies to notify potentially affected cardholders. The resort also notified law enforcement, and is providing notice to State Attorneys General and appropriate regulatory agencies. Okemo will continue to carefully monitor the security of its systems moving forward. Federal law enforcement officials are also investigating the matter.

 

Okemo recommends that all cardholders carefully review their credit card statements and credit reports and remain alert for any unauthorized or suspicious activity. Further, Okemo recommends that cardholders consider monitoring free credit reports that are available through the three major credit agencies. Okemo will also provide updates on this incident on www.okemo.com.