Filing: Ticketmaster confirms “unauthorized activity within a third-party cloud database”, after a hacking group advertised alleged data of 560M users for sale
On May 20, 2024, Live Nation Entertainment, Inc. (the “Company” or “we") … Aaron Brown / GB News : Your Ticketmaster login has been stolen and will be sold, hackers warn half a BILLION users Zack Whittaker / TechCrunch : Live Nation confirms Ticketmaster was hacked, says personal information stolen in data breach Rebecca Schneid / TIME : Ticketmaster Data Breach May Affect More Than 500 Million Customers. What to Know Juliana Kim / NPR : Ticketmaster hack may affect more than 500 million customers Pierluigi Paganini / Security Affairs : Ticketmaster confirms data breach impacting 560 million customers The Hill : Live Nation confirms Ticketmaster data breach could affect 560M users: What to know Joshua Hallenbeck / WKBN-TV : Live Nation confirms Ticketmaster data breach compromising 500 million users Todd Spangler / Variety : Ticketmaster Hacked: Customer Data Stolen and Shopped on Dark Web by ‘Criminal Threat Actor,’ Live Nation Discloses Richard Lawler / The Verge : Live Nation took 11 days to confirm the massive Ticketmaster data breach nltimes.nl : Data leak at Ticketmaster, over 560 million customers affected Sopan Deb / New York Times : Ticketmaster Confirms Data Breach. Here's What to Know. Dade Hayes / Deadline : Hackers Stole Ticketmaster User Data And Tried To Sell It On The Dark Web, Parent Company Live Nation Says Sam Sabin / Axios : The mysterious tale of an alleged breach at Ticketmaster Threads: @hunterwalk : i swear i was buying those front row Backstreet Boys tickets with meet & greet for a friend every single tour since 1993 For. A. Friend. X: Joe Tidy / @joetidy : Ticketmaster confirms data hack which could affect 560m globally. Confirmed then. It's a biggie. https://www.bbc.com/... Joe Tidy / @joetidy : Finding out about a giant data breach affecting hundreds of millions of people through a chilled out notice to investors is pretty grim. “We do not believe it is reasonably likely to have, a material impact on our financial condition or results of operations.” Joseph Cox / @josephfcox : New from 404 Media: Ticketmaster/Live Nation confirm the hack in an SEC filing. I also obtained a second, larger sample of data on Thursday. I verified it relates to genuine accounts on the Ticketmaster website, included personal info, payments, etc https://www.404media.co/... Joseph Cox / @josephfcox : Here's how I verified the second, larger sample of Ticketmaster data I got https://www.404media.co/... [image] LinkedIn: Or Shoshani : TLDR : Ticketmaster is allegedly facing a major data breach — Ticketmaster appears to have suffered a huge data breach, causing it to lose sensitive data on hundreds of millions of users. … Forums: r/technews : Live Nation confirms Ticketmaster was hacked, says personal information stolen in data breach
Context & Ripple Effects
The confirmation follows the earlier report that ShinyHunters was offering alleged Ticketmaster customer data for sale, turning an external claim into a disclosed incident for Live Nation and its users.
Ticketmaster has faced security scrutiny before: its UK operation was fined after a prior breach exposed inadequate security measures. The new disclosure puts particular focus on the controls and accountability around its third-party data environment.
First-order effects
- Live Nation must determine the scope of the unauthorized activity, secure the affected cloud environment, and communicate with customers whose personal data may be involved.
- Users potentially affected by the incident face a heightened risk of targeted fraudulent messages or account-related abuse, because alleged customer data has been advertised for sale.
Second-order effects
- The third-party cloud provider and Ticketmaster’s other vendors may face intensified security reviews as Live Nation traces where customer data was stored and who could access it.
- The incident raises the operational stakes for ticketing platforms to limit vendor access and segment customer data, especially after the initial report of a large alleged data sale.
Third-order effects
- If disclosures continue to identify third-party environments as the point of compromise, breach accountability will increasingly extend beyond the consumer-facing brand to cloud and data-service suppliers.
- For large ticketing platforms, repeated security incidents can make demonstrable data-governance controls—not merely incident response—a lasting trust and compliance differentiator.
The trend: This is one data point in the expansion of cybersecurity risk from companies’ own systems to the cloud and vendor environments that hold their customer data.