Ticketmaster
Disclosed May 31, 20242 years ago1,000 affectedConfirmed
Ticketmaster customer data stolen from Snowflake cloud database and offered for sale
Live Nation told the SEC it found unauthorized activity on May 20, 2024 in a third-party cloud database holding mostly Ticketmaster data, and a criminal offered the alleged user data for sale on May 27. The database was hosted on Snowflake; the ShinyHunters group claimed 560 million records.
What is known
| People affected | 1,000 (as reported by the organization) |
|---|---|
| Disclosed | May 31, 2024 |
| Discovered | May 23, 2024 |
| Happened | Apr 2, 2024 |
| Attack | Credential stuffing |
| Data exposed | Names, Government IDs, Emails, Phone numbers, Addresses, Payment cards |
| Sector | Media · US |
| Status | Confirmed |
| Part of | Snowflake (2024) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Ticketmasteroag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Ticketmasteratg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: TicketMasterattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Ticketmasterjustice.oregon.gov · Official notice | Official notice |
| Live Nation confirms Ticketmaster was hacked, says personal information stolen in data breachtechcrunch.com · News | News |
| Ticketmaster confirms hack which could affect 560mbbc.com · News | News |
| Live Nation Entertainment Form 8-K (May 31, 2024)sec.gov · SEC filing | SEC filing |
| Vermont Attorney General: 2024-07-05 Ticketmaster Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Ticketmasterin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 31, 2024 | |
| Washington AGresidents of WA | Jun 22, 2024 | 500 |
| Oregon DOJresidents of OR | Jun 26, 2024 | 250 |
| California AGresidents of CA | Jun 27, 2024 | |
| Indiana AGresidents of IN | Jun 27, 2024 | 1,000 |
| Vermont AGresidents of VT | Jul 5, 2024 | |
| Delaware DOJresidents of DE | Jul 8, 2024 | 500 |
Same campaign
History of this record
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1000 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-07-05-ticketmaster-data-breach-notice-consumers · backfill source
- 2026-09-25 · campaign: empty to snowflake-2024 · seed source
- 2026-09-25 · sector: other to media · seed source
- 2026-09-25 · attack: hacking to credential-stuffing · seed source
- 2026-09-25 · data_types: ["names","government-id"] to ["names","government-id","emails","phone","addresses","payment-card"] · seed source
- 2026-09-25 · disclosed: 2024-06-22 to 2024-05-31 · seed source
- 2026-09-25 · summary: empty to Live Nation told the SEC it found unauthorized activity on May 20, 2024 in a third-party cloud database holding mostly Ticketmaster data, and a criminal offered the alleged user data for sale on May 27. The database was hosted on Snowflake; · seed source
- 2026-09-25 · title: empty to Ticketmaster customer data stolen from Snowflake cloud database and offered for sale · seed source
- 2026-09-25 · data_types: [] to ["names","government-id"] · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2024-06-27 to 2024-06-22 · backfill source
- 2026-09-25 · discovered: empty to 2024-05-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.