Ticketmaster Warns of Third-Party Data Breach

Ticketmaster customers were sent emails warning them to act after an alleged hack against a third-party cloud storage provider, Snowflake, in May. The hack allegedly led to the release of personally identifiable information of 560 million Ticketmaster customers. [1] Threat actors allegedly gained access to the cloud storage provider, Snowflake, after stealing credentials from users. On 28^th May the threat actor ShinyHunters posted an advertisement on a hacking forum, initially demanding $500,000 for the stolen data. The hack allegedly affected numerous Snowflake clients including the Santander banking group. [2] A recent update by Ticketmaster states they “discovered unauthorized activity on an isolated cloud database hosted by a third-party data services provider”. [3]

The ticket-selling company sent emails to customers in Canada on 8 July 2024 urging them to take measures to protect themselves against scams which could include identity theft and fraud. The email noted that a “data security incident” may have leaked customer information and the company is encouraging users to look out for suspicious activity relating to online accounts and email. Ticketmaster stated the information may include “name, basic contact information, and payment card information such as encrypted credit or debit card numbers”. [4] In leaks such as these, stolen data that includes personally identifiable information is often sold on dark web markets. The stolen information can then be used to conduct secondary attacks such as fraud and hacking attempts.

Black Room Intelligence provides comprehensive Third-Party monitoring of your Supply Chain monitoring against data breaches and potential attacks. With a quick and simple onboarding process, your entire supply chain could be monitored within hours, providing immediate peace of mind and assurance.    

References:

1. Ticketmaster warns customers to take action after hack. BBC. 2024 July 9. Available from: https://www.bbc.co.uk/news/articles/c729e3qr48qo  

2. Ticketmaster warns North American customers after major hack. BusinessMatters. 2024 July 9. Available from: https://bmmagazine.co.uk/in-business/ticketmaster-warns-north-american-customers-after-major-hack/  

3. Ticketmaster Data Security Incident. Ticketmaster 2024. Available from: https://help.ticketmaster.com/hc/en-us/articles/26110487861137-Ticketmaster-Data-Security-Incident  

4. Ticketmaster says customers’ credit card information affected by data breach. Yahoo. 2024 July 8. Available from: https://ca.news.yahoo.com/ticketmaster-says-customers-credit-card-223716621.html

‍