Do you use Ticketmaster for your events?

If so it is time to speak to your cyber security support and check if your customer’s data has been compromised?

Ticketmaster confirms massive breach after stolen data for sale online (bleepingcomputer.com)

The ransomware gang, Shiny Hunters, has tried to sell the Ticketmaster data on the Dark Web. Here is a quote from Lawrence Abrams, on BleepingComputer as to what that compromised data apparently comprises of:

“The allegedly stolen databases supposedly contain 1.3TB of data, including customers’ full details (i.e., names, home and email addresses, and phone numbers), as well as ticket sales, order, and event information for 560 million customers.”

The attack appears to have originated from the use of malware to steal cloud storage credentials, from a third party that Ticketmaster uses. The Third party – Snowflake – dispute this and is blaming poorly secured client accounts.

Snowflake account hacks linked to Santander, Ticketmaster breaches (bleepingcomputer.com)

There is no indication yet as to which customers have been impacted by the Ticketmaster data theft.

Your takeaway

Secure any and all SaaS systems you use with the minimum of multi-factor authentication and take advantage of any other security options offered by the service.

Clive Catton MSc (Cyber Security) – by-line and other articles

Further Reading