Ticketmaster data breach exposes millions, raises security concerns
Entertainment conglomerate Live Nation confirmed a breach of its subsidiary, Ticketmaster. The data breach occurred on May 20, and the cybercriminal offered user data for sale on the dark web.
As reported by TechCrunch, Live Nation disclosed the incident to regulatory authorities only after more than a week.
Incident details
Live Nation detected unauthorized activity in a database managed by an external cloud provider without revealing its name. In response to TechCrunch inquiries, a Ticketmaster spokesperson confirmed that the database was hosted on servers by Snowflake, a company specializing in data storage and analysis.
Response from Ticketmaster and Live Nation
Snowflake stated that the attacks might have affected a limited number of customers but did not provide details. Snowflake spokesperson Danica Stanczak declined to comment on the Ticketmaster incident. Similarly, Live Nation and Ticketmaster representatives have not publicly commented on the details of the breach.
Information provided on the Ticketmaster website indicates that Live Nation Entertainment is a global leader in live entertainment. It consists of five companies operating in concert promotion, event venue management, sponsorship, ticket distribution, e-commerce, and artist management.
Data sale on forum
The administrator of the popular cybercriminal forum BreachForums claims to possess data on 560 million customers, including information on Ticketmaster users, such as ticket sales and payment card data. TechCrunch obtained some of this data, which was found authentic after email address verification.
In May, the Department of Justice and 30 state attorneys general filed a lawsuit against Live Nation, accusing the company of monopolistic practices.
