[NLNOG] Pretix security incident

[Teun Vink]

Hello,

We were notified by Pretix, the company hosting the ticketing system we have used for our events for the last few years, of a security incident, which in theory could lead to exfiltration of personal information of people who bought a ticket. 

The issue in their software has been resolved by Pretix, and no evidence has been found that this vulnerability has been exploited. More information on this can be found here: https://pretix.eu/about/en/blog/20260216-release-2026-1-1/

We realise that many of you use unique email addresses to identify sources of spam, so if you do see any unexpeced email on the address you used to for obtaining a ticket, please do let us know, so we can contact Pretix about it.

Even although this doesn't help for this incident, for future events we will make sure that we will quickly remove all personally identifiable information (PII) after the event has taken place. And of course we will make sure to to this for past events now.

On behalf of the NLNOG board,
Teun