Fandango says someone outside the company could access payment card details from certain movie-ticket purchases made on its checkout page from Oct. 8 through Oct. 11. The notice Fandango filed with California says card numbers, security codes, expiration dates, billing ZIP codes and email addresses may have been exposed. The company is offering recipients two years of free credit monitoring through IDX, with enrollment due Feb. 13, 2027.

The California attorney general's register shows the filing on Nov. 13. Vermont’s attorney general listed 18 Vermont residents in a separate filing the same day. The California notice gives no nationwide total. Fandango says it fixed the checkout issue and determined on Oct. 30 that the recipient's information may have been affected. The company says it was unaware of fraudulent use when it sent the notice.

Which purchases to check

A printed movie ticket
A printed cinema ticket, photographed in October 2024. The notice covers certain tickets bought through Fandango’s online checkout.Monikaa Baskar / Wikimedia Commons · CC0 1.0.

Look for a Fandango ticketing charge or receipt from the four-day window. The company says the issue affected certain transactions. The purchase date helps narrow which card to review. The company says the incident did not involve names, Social Security numbers, government ID information or other account information.

If you see a purchase you did not make, report it promptly using the number on your card or your issuer's app. The Consumer Financial Protection Bureau says people are generally not responsible for unauthorized charges when only the credit card number is stolen. Debit-card customers should tell their bank right away. When an unauthorized debit appears on a statement and the card itself is still in your possession, the bureau says to report it within 60 days after the statement is available. You can ask your issuer whether to replace the card even if you have seen no unfamiliar charge.

How to use the monitoring offer

The sample letter lists 866-200-0940 for questions, from 6 a.m. to 6 p.m. Pacific on weekdays, excluding U.S. holidays. Recipients need the enrollment code in their own notice. The California attorney general hosts a redacted sample readers can compare with a message they receive. The monitoring can flag changes to a credit file. Your card issuer handles any disputed purchase.