Ticketmaster Data Breach Lawsuit Says Info of 560 Million People Put Up for Sale on Dark Web by Hackers

New to ClassAction.org? Read our Newswire Disclaimer

Ticketmaster faces a proposed class action lawsuit after parent company Live Nation confirmed late last week that the ticket seller was hit by a data breach in which the case claims the sensitive information of 560 million people was stolen by hackers and subsequently put up for sale on the dark web.

Were you impacted by the Ticketmaster data breach? Let us know here.

The 37-page Ticketmaster data breach lawsuit says the cyberattack was a direct result of the company’s failure to implement adequate cybersecurity procedures and properly monitor its systems for unauthorized intrusion. According to the case, Ticketmaster customers’ full names, addresses, email addresses, phone numbers, ticket sales and events details, order specifics, and partial payment card data was stolen by hackers during the “targeted cyberattack.” 

Live Nation confirmed in a May 31 regulatory filing that it had on May 20 “identified unauthorized activity within a third-party cloud database environment” containing Ticketmaster data and launched an investigation to understand the scope of the incident. The concert and events behemoth stated in the notice that on May 27 a “criminal threat actor” offered Ticketmaster customer data for sale on the dark web.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The proposed data breach class action lawsuit says the hacker group ShinyHunters has claimed responsibility for the theft of roughly 1.3 terabytes of Ticketmaster user data and has reportedly offered the information for sale for $500,000.

As of May 29, neither Ticketmaster nor Live Nation have released a statement or notified customers that their sensitive information has been stolen and is likely available for sale, the filing emphasizes. Ticketmaster also has not disclosed any specifics related to the data breach, including whether ransomware was used by the perpetrators, the case adds. 

“Ticketmaster consumers are in the dark, unaware that their Private Information may be used to effectuate identity theft, phishing scams, plunging credit scores and related cybercrimes,” the complaint reads, calling identity theft “a likely outcome” for Ticketmaster data breach victims given the breadth of information exfiltrated during the incident. 

The lawsuit relays that Ticketmaster and Live Nation have expressly promised to safeguard the personal information consumers provide in the process of buying event and concert tickets—and had an obligation to do so under the Federal Trade Commission Act. As a result of the Ticketmaster data breach, proposed class members have lost out on the value of their information, will incur out-of-pocket expenses related to mitigating the harm from the cyberattack, and face an increased risk of identity theft and fraud, among other real damages, the suit shares. 

“The security of Plaintiffs’ and Class Members’ identities is now at substantial risk because of Defendants’ wrongful conduct as the Private Information that Defendants collected and maintained are now in the hands of data thieves. This present risk will continue for the course of their lives.” 

The Ticketmaster data breach class action lawsuit looks to cover all United States residents whose private information was compromised as a result of the data breach. 

On May 23, Ticketmaster and Live Nation were hit with an antitrust class action lawsuit after the Justice Department and dozens of attorneys general nationwide sued the companies, calling for a break up of an alleged monopoly over the live events industry. 

Were you impacted by the Ticketmaster data breach? Let us know here.