Ticketmaster confirmed that hackers accessed personal information of customers.
Customers began posting notices they received from Ticketmaster last week informing them of their involvement in the breach.
The notice, included in a filing with the Maine Attorney General, stated that between April 2 and May 18, “unauthorized third parties obtained information from a cloud database hosted by a third-party data service provider.”
The company said in a filing that the breach affected more than 1,000 customers.
PC Mag reported on Friday that a hacking group called ShinyHunters claimed to have stolen 1.3TB of data from the ticket broker.
When asked for comment, Ticketmaster pointed to supporting documentation but declined to comment further. The documentation said the breach involved customers who purchased tickets from the company in North America.
The information accessed “may include emails, phone numbers, encrypted credit card information, and other personal information provided to us,” the page states. The company said it does not believe that customers who were not notified were involved in the breach.
Ticketmaster data breach lawsuit pending
California residents Cynthia Ryan and Rosalia Garcia filed a data breach lawsuit in May in the Central District Court of California.
The couple allege that both Ticketmaster and Live Nation failed to adequately protect their personal information, including names, addresses, email addresses, phone numbers, ticket sales and event details, order information and some payment card data.
The information was then offered for sale on the dark web for $500,000, according to the lawsuit.
“[The] “The compromised payment data included customer names, the last four digits of card numbers, expiration dates, and even customer fraud details,” the complaint states.
In a regulatory filing in May, Live Nation said “criminal threat actors” had attempted to sell Ticketmaster data on the dark web. Live Nation is investigating the data breach.
Ticketmaster data breach: what to do
According to the notice, Ticketmaster is offering identity monitoring services to its customers through TransUnion, and customers must sign up within 90 days of receiving the notice.
The company advises customers to monitor their credit cards and bank accounts for signs of suspicious activity.
