Ticketmaster is the victim of a cyber attack, its parent company, Live Nation, confirmed. The information stolen allegedly includes personal information from 560 million individuals, including names, numbers, addresses, and partial payment details. Hacking group ShinyHunters has demanded $500,000 in ransom money to prevent the data’s sale and confirmed it held the 1.3TB of stolen data to Hackread.
In a filing with the US Securities and Exchange Commission, Live Nation stated it had “identified unauthorized activity” on May 20 and subsequently started investigating it. On May 27, “a criminal threat actor offered what it alleged to be Company user data for sale via the dark web.”
Live Nation claims to be working to lower the risks posed to its customers and its own business. “As of the date of this filing, the incident has not had, and we do not believe it is reasonably likely to have, a material impact on our overall business operations or on our financial condition or results of operations,” the company added. “We continue to evaluate the risks and our remediation efforts are ongoing.”
Ticketmaster has faced previous breaches, including a bot attack during Taylor Swift ticket sales. The company also has a history as a hacker, illegally — and repeatedly — accessing the computer system of its rival, Songkick. Ticketmaster paid a $10 million criminal fine rather than face prosecution. However, the company’s former head of Artist Services, Zeeshan Zaidi, pled guilty to conspiring to commit computer intrusions and wire fraud due to his role in the scheme.