Ticketmaster, one of the largest online ticket sales platforms globally, confirmed a significant data breach that could affect up to 560 million users worldwide. Here’s what we know:
Incident Date: On May 27, a criminal threat actor offered what it alleged to be Ticketmaster user data for sale via the dark web.
Stolen Data: The stolen data includes **names, addresses, phone numbers**, and **partial credit card details** from Ticketmaster users worldwide.
Ransom Demand: The hacking group responsible, known as ShinyHunters, demanded a $500,000 (£400,000) ransom payment to prevent the data from being sold to other parties.
Investigation and Assistance: Ticketmaster’s parent company, Live Nation, is investigating the breach. The Australian government and the FBI have also offered assistance.
Live Nation is working to mitigate risks for its customers and notifying affected users about the unauthorized access to their personal information.
As of now, Live Nation believes the incident has not had a material impact on its overall business operations or financial condition.
ShinyHunters has been linked to other high-profile data breaches, including selling a genuine database of stolen information from 70 million customers of US telecoms firm AT&T in 2021. If the data hack is as large as claimed, it could be one of the most significant breaches ever in terms of numbers and the extent of the data stolen.