What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Ticketmaster acknowledged unauthorized activity in May 2024 involving an isolated third-party cloud database. The company says the database contained limited personal information for some customers in the United States, Canada and/or Mexico, but its public incident notice does not state how many people were affected. Here are the five points that are established—and the claims that remain unverified.
1. The incident was identified in May 2024
Live Nation Entertainment said in a Form 8-K filed May 31, 2024 that it identified unauthorized activity on May 20 in a third-party cloud database environment containing company data, primarily from Ticketmaster.
The filing says a criminal threat actor offered what it alleged was company user data for sale on the dark web on May 27. Live Nation said it began an investigation, worked to mitigate risk, notified and cooperated with law enforcement, and was notifying regulators and users as appropriate.
2. The potentially exposed information was limited personal data
According to Ticketmaster’s incident notice, the affected database was hosted by a third-party data-services provider and held limited personal information for some customers who bought tickets to events in North America—specifically the United States, Canada and/or Mexico.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
The company lists possible information as:
- Email address
- Phone number
- Encrypted credit-card information
- Other information customers provided to Ticketmaster
“Possible” matters here: Ticketmaster does not say that every listed category was taken for every affected customer. The company also says its investigation with cybersecurity experts and relevant authorities found no further unauthorized activity. It has not publicly identified the cloud provider or described a specific intrusion method in these notices.
3. The affected-customer count and hacker attribution are not confirmed
Ticketmaster’s public incident page does not give a breach-wide customer or record count. Do not treat figures circulating online as established facts.
The Associated Press reported on June 1, 2024 that the group ShinyHunters claimed responsibility in an online forum and sought $500,000 for the data. Those are claims reported by AP. Live Nation’s filing refers only to a criminal threat actor and alleged company data; it does not name ShinyHunters or verify the group’s claim, the asking price or the amount of data.
4. Ticketmaster says it is contacting relevant customers and offering monitoring
Ticketmaster says it is notifying customers it believes may have been affected by email or first-class mail. It says those relevant customers were offered 12 months of free credit or identity monitoring through a provider that is not named on the incident page.
If you receive a notice, use the contact details in that notice rather than relying on an unsolicited message. Ticketmaster recommends:
- Monitoring bank and other financial accounts for fraud or identity-theft signs
- Contacting your bank or credit-card issuer immediately if you see suspicious activity
- Being cautious with unexpected emails, unusual links or attachments, and phone requests for personal information
5. Ticketmaster says accounts were not affected
Ticketmaster’s FAQ says customer accounts were not affected by this incident and that customers do not need to reset their passwords because of it. The same guidance recommends using a strong, unique password as general account security practice.
That statement is Ticketmaster’s published guidance, not a guarantee about every individual situation. If you received a breach notification, follow its instructions. If you reused a Ticketmaster password elsewhere, changing the reused password on those other services is sensible security hygiene, especially if suspicious activity or an unexpected login alert appears.
Quick Recap
What the public record establishes
| Question | What the cited sources say |
|---|---|
| Was there unauthorized access? | Live Nation and Ticketmaster acknowledge unauthorized activity in a third-party cloud database. |
| What data may have been involved? | Limited personal information for some North American ticket buyers, potentially including email, phone, encrypted card information and other customer-provided data. |
| How many customers were affected? | Not stated on Ticketmaster’s incident page or in the cited Live Nation filing. |
| Who was responsible? | Live Nation identifies a criminal threat actor; the filing does not name an individual or group. ShinyHunters’ responsibility claim was reported by AP, not confirmed by the company. |
| Do customers need to reset passwords? | Ticketmaster says accounts were not affected and a reset is not required because of this incident. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
