Ticketmaster Issues Statement After 560 Million Users Affected By Data Breach

Live Nation, the parent company of Ticketmaster, confirmed in a recent SEC filing (31 May) that it suffered a data breach last month.

The filing states that the hack happened on “a third-party cloud database environment containing Company data,” not on Ticketmaster’s servers. A representative for the Cloud-based company, Snowflake, responded that the company has “no evidence suggesting this activity was caused by any vulnerability, misconfiguration, or breach of Snowflake’s product.”

As The Music reported last week, a data breach affected 560 million Ticketmaster customers. Whether Australians have been impacted remains unclear.

Hacker group ShinyHunters claimed responsibility and reportedly asked for a one-time price of $US500,000 ($750,000) for the stolen data. The group claimed to have the personal details of 560 million Ticketmaster customers, with 1.3 terabytes of data sorted in 16 folders.

The personal details ShinyHunters claimed to hold included names, addresses, incomplete credit card numbers – the last four digits and expiry dates – phone numbers, and payment details.

According to the statements made in the SEC filing, Live Nation revealed that it identified unauthorised activity on the third-party cloud service it uses on 20 May and went on to launch an investigation into the data breach. Live Nation have been cooperating with US law enforcement to deal with the matter.

In a statement, Ticketmaster said that the hack “has not had, and we do not believe it is reasonably likely to have, a material impact on our overall business operations or on our financial condition or results of operations.”

A source who spoke to Rolling Stone also confirmed that there was no evidence of account credentials becoming compromised.

Australians were affected by a hack claimed by ShinyHunters last September when 193,000 Pizza Hut customers' data was leaked.

The Music has contacted Ticketmaster for comment on how Australians have been affected by the data breach.

Yesterday (3 June), The Music reported on Ticketek confirming that some customer details “may have been impacted” by a new cyber incident.

On Friday (31 May), a Ticketek statement on the TEG website detailed that the company had “become aware” of a cyber incident that impacted customers’ account information.

In the statement, Ticketek revealed that it had notified the Australian Cyber Security Centre (ACSC) and is liaising with the Office of the Australian Information Commissioner (OAIC) and the National Office of Cyber Security to deal with the incident.