Live Nation disclosed Ticketmaster data theft from a third-party cloud database

Live Nation Entertainment, the parent company of Ticketmaster, told the U.S. Securities and Exchange Commission that it had identified unauthorized activity in a third-party cloud database environment holding company data.

The company said the activity was found on May 20, 2024 and that it launched an investigation with outside forensic help. On May 27 a criminal actor offered what it described as Ticketmaster user data for sale on a dark web forum. Live Nation filed its disclosure at the end of the month, saying it was working to mitigate risk to its users and to the company and had notified and was cooperating with law enforcement. It added that the incident had not had, and was not reasonably likely to have, a material impact on its business operations or financial condition.

The group known as ShinyHunters claimed responsibility and advertised 1.3 terabytes of data said to cover 560 million Ticketmaster customers, including names, addresses, phone numbers and partial payment card details, with a reported asking price of $500,000. Live Nation did not confirm the volume or the contents, and the claim was not independently verified at the time.

The filing did not name the third-party vendor, explain how access was obtained or say whether the intrusion had been contained, and both Live Nation and Ticketmaster declined to answer further questions from reporters. The disclosure came days after the U.S. Department of Justice and a group of state attorneys general filed an antitrust suit against the company.