BԪַ

Skip to content

Ticketmaster cyberattack may affect usersBԪַ personal details

1,000s of users may have had their data compromised
web1_2024040415040-660ef8c731e80233fb5c9578jpeg
Ticketmaster tickets and gift cards are shown at a box office in San Jose, Calif., on May 11, 2009. THE CANADIAN PRESS/AP, Paul Sakuma

Ticketmaster has been warning some Canadian customers that their data may have been compromised during a recent security breach.

An email sent by the ticket sales platform to customers this week reveals BԪַan unauthorized third partyBԪַ snagged information from a cloud database hosted by an unnamed third-party data services provider sometime between April 2 and May 18.

The email said the company determined on May 23 that some of its customersBԪַ names, basic contact information, and payment card information such as encrypted credit or debit card numbers and expiration dates were part of the breach.

BԪַWe are fully committed to protecting your information, and deeply regret that this incident occurred,BԪַ the email said.

The missive comes months after Live Nation, TicketmasterBԪַs Beverly Hills, Calif.-based parent company, said in regulatory filings that on May 27 BԪַa criminal threat actorBԪַBԪַ offered to sell Ticketmaster data on the dark web.

Several media outlets reported at the time that ShinyHunters, a cyberattack group thought to have formed in 2020, was behind the attack that allegedly scooped up data belonging to 560 million Ticketmaster users. (ShinyHunters has been linked to past attacks on tech giant Microsoft, telecom firm AT&T Wireless and storytelling site Wattpad.)

Ticketmaster spokespeople did not answer questions The Canadian Press sent them about the number of Canadians affected by the recent breach and instead provided a link to a web page the company has set up to address user queries about the incident.

The page said the company is working with authorities and cybersecurity experts, credit-card companies and banks to investigate the incident but has found no further unauthorized activity.

BԪַItBԪַs surprising to me that we continue to have these types of problems given the fact that thereBԪַs been so much attention paid, especially in the media, to issues around cybersecurity,BԪַ said Robert Falzon, head of engineering at safety software business Check Point.

Statistics Canada data shows the country experienced 74,073 police-reported cybercrimes in 2022, up from 71,727 in 2021 and 33,893 in 2018. The actual number of cybercrimes may be even higher because many people are too embarrassed to report when they have fallen victim.

Indigo Books & Music Inc., Giant Tiger and London Drugs have all been among the organizations who faced cyber breaches in recent years.

In the case of Ticketmaster, Falzon pointed out that the vulnerability lay with a third-party data services firm, but the ticket sales business still has obligations.

BԪַIt remains their responsibility to manage their supply chain or manage their partners to make sure that they too are following the same standards to protect their user data,BԪַ Falzon said.

BԪַAnd yet it seems like we continue to have challenges or risk or issues like this on an almost weekly basis.BԪַ

The data hackers may have obtained can be particularly valuable, especially when combined with other data leaks or tidbits they glean from online profiles, he said.

For example, a bad actor could use the data to uncover your Facebook profile and if youBԪַve posted about a disease youBԪַre battling, it could then tailor further attacks on you to include information about the condition or potential cures.

If you received the email from Ticketmaster, Falzon recommended changing your password immediately and ensuring youBԪַre not using it elsewhere.

BԪַEspecially if theyBԪַre one of those people that are using the same password repeatedly, itBԪַs a great opportunity to go in and look at all the services that you used,BԪַ he said.

He also suggested people set up multi-factor authentication, which requires people to enter a code that is texted or emailed to them to log into accounts. Multi-factor authentication can often be a deterrent for cyber attackers because it requires them to access more than one account or device.

Ticketmaster offered those affected by the breach one free year of credit-monitoring services and also recommended users monitor their bank activity and emails to ensure thereBԪַs no suspicious activity.

BԪַBe cautious of unsolicited emails from unknown senders, especially those with unusual content, links, attachments, or requests for personal information over the phone,BԪַ the company warned.

READ ALSO:





(or

BԪַ

) document.head.appendChild(flippScript); window.flippxp = window.flippxp || {run: []}; window.flippxp.run.push(function() { window.flippxp.registerSlot("#flipp-ux-slot-ssdaw212", "Black Press Media Standard", 1281409, [312035]); }); }