ShinyHunters claimed in May 2024 that it had Ticketmaster customer data, but the group’s headline figure of 560 million users was not confirmed by Ticketmaster. The company separately disclosed unauthorized activity in an isolated cloud database hosted by a third-party provider, involving limited personal information for some customers in the United States, Canada, and Mexico. Ticketmaster said customer accounts were not affected.
What did hackers claim about Ticketmaster?
SecurityWeek reported on May 31, 2024, that ShinyHunters announced a newly created BreachForums portal and claimed it had stolen information relating to 560 million Ticketmaster users. The group allegedly said the data totaled 1.3 terabytes and sought $500,000 for it. Those figures and the claimed sale price were attributed to ShinyHunters, not established incident statistics.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
StubHub eGift Card | $200.00 | Buy on Amazon |
| 2 |
|
StubHub Physical Gift Card - $100 | $100.00 | Buy on Amazon |
| 3 |
|
StubHub Physical Gift Card - $50 | $50.00 | Buy on Amazon |
| 4 |
|
Visa Physical Gift Card $200 (plus $6.95 Purchase Fee) | $206.95 | Buy on Amazon |
| 5 |
|
Visa Virtual eGift Card | $206.95 | Buy on Amazon |
The group reportedly described the data as including names, addresses, email addresses, phone numbers, partial credit-card information, and financial transactions. SecurityWeek also relayed that Vx-Underground had examined a sample that appeared authentic to the researchers. They said entries reached back to 2011, with some from the mid-2000s, and the newest entries were dated March 2024. A sample assessment does not verify the full dataset, its total size, or the number of affected people.
SecurityWeek reported additional uncertainty at the time: Ticketmaster had not confirmed the broader breach claim when the story was published, Australian authorities were probing it, and some observers suggested the new forum domain might be a law-enforcement honeypot. Vx-Underground’s reported view that ShinyHunters was acting as a proxy, and that data may have come from Ticketmaster AWS instances after a managed-services provider was compromised, was an assessment—not a confirmed Ticketmaster or law-enforcement finding. SecurityWeek’s May 31, 2024 report
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- One of the world’s largest ticket marketplaces
- StubHub Fan Rewards
- The StubHub FanProtect Guarantee
- 24/7 Customer Support
- Redemption: Online
What did Ticketmaster confirm?
Ticketmaster’s incident notice says it discovered unauthorized activity on an isolated cloud database hosted by a third-party data-services provider. The company says that database held limited personal information for some customers who bought tickets to events in the United States, Canada, and/or Mexico. Potentially involved information included email addresses, phone numbers, encrypted credit-card information, and other information customers had provided.
Ticketmaster says its accounts were not affected and that its investigation found no further unauthorized activity. These are the company’s stated findings; the notice does not establish that its confirmed incident covered every record or data category in the hackers’ separate claim. Ticketmaster’s data security incident notice
Rank #2
- One of the world’s largest ticket marketplaces
- StubHub Fan Rewards
- The StubHub FanProtect Guarantee
- 24/7 Customer Support
- Redemption: Online
Is your Ticketmaster account safe, and should you change your password?
Ticketmaster says customer accounts were not affected and states, “Your Ticketmaster account remains secure.” Its notice does not call for a password reset. Based on that notice, a password change is not presented as a required incident response. If you reuse your Ticketmaster password on other sites, changing it on those sites is prudent account-security practice; use a unique password for each account.
How will you know if you were affected?
Ticketmaster says it is notifying relevant customers by email or first-class mail. It says affected customers are being offered 12 months of identity monitoring through a provider it does not name. The notice does not say that all customers were affected, so an unsolicited message claiming to confirm your status should be treated cautiously.
Recommended Free Tools
Rank #3
- Redemption: Online
- No returns and no refunds on gift cards.
What should you do now?
- Watch financial accounts. Ticketmaster recommends monitoring bank accounts for suspicious activity.
- Contact your bank or card issuer about anything unusual. Follow its advice on disputing charges, replacing a card, or securing your account.
- Verify unexpected communications independently. Be wary of unsolicited messages, links, attachments, or requests for personal information. Do not use a link in a suspicious message to sign in; go to Ticketmaster through its official site or app.
- Use unique passwords. If your Ticketmaster password is reused elsewhere, replace it on those other services with unique credentials.
What does “relaunched BreachForums” mean?
The May 2024 report described a newly created portal presented as a fresh BreachForums site; it did not prove that the portal was an authentic or enduring successor. The FBI says it is investigating BreachForums and RaidForums. Its historical account describes a ShinyHunters-operated clear-net marketplace version running from June 2023 until May 2024, and an earlier version run by “pompompurin” from March 2022 until March 2023. That history does not authenticate the portal associated with the Ticketmaster claim. FBI information on breaches and data leaks
Quick Recap
Best Value
- Visa Virtual eGift Cards are designed for online use only. Gift Cards are subject to Terms and Conditions: a.co/5bw3qXJ
- When you access your Visa Virtual eGift Card for the first time, you’ll need to register your name, address, phone number, and email address via activationspot.com. These details should also be used as your billing address for online purchases, as many merchants require address verification for purchase authorization.
- This Visa Virtual eGift Card is non-reloadable. No cash or ATM access. Visa Virtual eGift Cards are emailed active.
- Funds do not expire but your Visa Virtual eGift Card has a ‘valid thru’ date (9 years from date of purchase). If funds remain after this date has passed, please call the Toll Free number found on your Visa Virtual eGift Card for a replacement card. A one-time purchase fee applies at the time of checkout.
- This item is not eligible for refund, resale, or return. Available for sale within the United States only. Not available to residents of Puerto Rico, Hawaii, New Mexico, South Dakota, West Virginia and the US Virgin Islands.
Rank #4
- Gift Cards are shipped active and ready for use.
- This card is non-reloadable. No cash or ATM access. Funds do not expire. If available funds remain on your card after the valid thru date has passed, please call customer service for a replacement card. A one-time purchase fee applies at the time of checkout. No fees after purchase.
- To access your card information safely, type the complete website address shown on your Gift Card (MyGift.GiftCardMall.com) directly into your browser's address bar. Don't use search engines or shortened versions of the website address, as these may lead you to fake or fraudulent sites. Do not provide any Gift Card details (example: Card Number) to someone you do not know or trust. If you believe you've reached an illegitimate website, contact cardholder service at 1-888-524-1283. Be cautious of phishing sites, there are a variety of scams in which fraudsters try to trick others into paying with gift cards.
- To report your Lost or Stolen Physical Visa Card, call Customer Service 24/7 at 1 (888) 524-1283 to cancel your Gift Card as soon as you can. You will be asked to provide the Gift Card number and other identifying information.
- Use your Visa Gift Card in the U.S. everywhere Visa debit cards are accepted, including online.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
