Just got my letter today also - haven't bought anything at the Box Office in months. BUT - the letter seems to imply that although the "break-in" was in March/April, Vendini had the CC information stored in their server farm so our (all of us) info could have been gathered/handled by Vendini from transactions made many, many months ago. Best we can do is watch the credit card charges. Since Vendini does not (per their letter) collect the card PIN, your name, SSN, password, etc, it could have been much worse. Doing a credit check with one or more of the three big three companies might be good for piece of mind.
|