Ticketmaster breach: How did this card skimming attack work?