Ticketmaster
Disclosed May 31, 20241,000 affectedConfirmed
Ticketmaster customer data stolen from Snowflake cloud database and offered for sale
Live Nation told the SEC it found unauthorized activity on May 20, 2024 in a third-party cloud database holding mostly Ticketmaster data, and a criminal offered the alleged user data for sale on May 27. The database was hosted on Snowflake; the ShinyHunters group claimed 560 million records.
What is known
| People affected | 1,000 (as reported by the organization) |
|---|---|
| Disclosed | May 31, 2024 |
| Discovered | May 23, 2024 |
| Happened | Apr 2, 2024 |
| Attack | Credential stuffing |
| Data exposed | NamesGovernment IDsEmailsPhone numbersAddressesPayment cards |
| Sector | Media · US |
| Status | Confirmed |
| Part of | Snowflake (2024) |
Sources
California Attorney General breach notice: TicketmasterWashington Attorney General breach notice: TicketmasterNotice letter filed with the Delaware DOJ: TicketMasterOregon DOJ breach notice: TicketmasterLive Nation confirms Ticketmaster was hacked, says personal information stolen in data breachTicketmaster confirms hack which could affect 560mLive Nation Entertainment Form 8-K (May 31, 2024)Vermont Attorney General: 2024-07-05 Ticketmaster Data Breach Notice to ConsumersIndiana Attorney General 2024 data breach report: Ticketmaster
Notices filed
Same campaign
History of this record
empty to organizationby backfillSource
empty to 1000by backfillSource
empty to https://ago.vermont.gov/document/2024-07-05-ticketmaster-data-breach-notice-consumersby backfillSource
empty to snowflake-2024by seedSource
other to mediaby seedSource
hacking to credential-stuffingby seedSource
["names","government-id"] to ["names","government-id","emails","phone","addresses","payment-card"]by seedSource
2024-06-22 to 2024-05-31by seedSource
empty to Live Nation told the SEC it found unauthorized activity on May 20, 2024 in a third-party cloud database holding mostly Ticketmaster data, and a criminal offered the alleged user data for sale on May 27. The database was hosted on Snowflake;by seedSource
empty to Ticketmaster customer data stolen from Snowflake cloud database and offered for saleby seedSource
[] to ["names","government-id"]by backfillSource
unknown to hackingby backfillSource
2024-06-27 to 2024-06-22by backfillSource
empty to 2024-05-23by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.